[sudoer] Enable read-only commands for all users (#1558)

sonic-net · Apr 19, 2018 · 8153ce7 · 8153ce7
1 parent d423841
commit 8153ce7
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/files/image_config/sudoers/sudoers b/files/image_config/sudoers/sudoers
@@ -37,6 +37,9 @@ Cmnd_Alias      PASSWD_CMDS = /usr/bin/config tacacs passkey *, \
 # User privilege specification
 root    ALL=(ALL:ALL) ALL
 
+# Allow all users to execute read only commands
+ALL     ALL=NOPASSWD: READ_ONLY_CMDS
+
 # Allow members of group sudo to execute any command
 %sudo   ALL=(ALL:ALL) NOPASSWD: ALL