7726d1579c
manage_sudo.sh: moved essential configuration items of the script into a separate configuration file (global/local), fix in wait_for_children (VRF 1.2.0) [Patrick Van der Veken] update_sudo.pl: VRF 1.1.0: replace uname/hostname syscalls, now support for FQDN via $use_fqdn, other fixes [Patrick Van der Veken] Other fixes and cleanups
52 lines
1.7 KiB
Plaintext
52 lines
1.7 KiB
Plaintext
#******************************************************************************
|
|
# manage_ssh.sh configuration file
|
|
#******************************************************************************
|
|
#
|
|
# Lines starting with '#' (hash) are comment lines
|
|
#
|
|
# Format: option=<value>
|
|
#
|
|
# Use double or single quotes around the option values in case of strings.
|
|
#
|
|
|
|
# name of the user account performing the SUDO controls copies
|
|
# (leave blank for current user)
|
|
SUDO_TRANSFER_USER=""
|
|
|
|
# name of the OS group that should own the SUDO controls files
|
|
SUDO_OWNER_GROUP="sudoadmin"
|
|
|
|
# extra arguments/options for the SFTP command
|
|
SFTP_ARGS="-o StrictHostKeyChecking=no -o ConnectTimeout=10 -b - "
|
|
|
|
# extra arguments/options for the SSH command
|
|
SSH_ARGS="-o StrictHostKeyChecking=no -o ConnectTimeout=10 -n"
|
|
|
|
# location of the local SUDO controls directory
|
|
LOCAL_DIR="/etc/sudo_master"
|
|
|
|
# location of the remote SUDO controls directory
|
|
REMOTE_DIR="/etc/sudo_controls/holding"
|
|
|
|
# name of the user account performing the SUDO controls update
|
|
# (leave blank for current user but user should have remote sudo root privs)
|
|
SUDO_UPDATE_USER=""
|
|
|
|
# options to pass to manage_ssh.sh when executing a key update
|
|
SUDO_UPDATE_OPTS="--verbose --remove"
|
|
|
|
# path to the visudo tool
|
|
VISUDO_BIN="/usr/sbin/visudo"
|
|
|
|
# maximum number of background process to spawn (~maxuprc, ~nstrpty etc)
|
|
MAX_BACKGROUND_PROCS=30
|
|
|
|
# location of the backup directory (for configuration & key files)
|
|
BACKUP_DIR="${LOCAL_DIR}/backup"
|
|
|
|
# location of log directory (default), see --log-dir)
|
|
LOG_DIR="/var/log"
|
|
|
|
#******************************************************************************
|
|
# End of FILE
|
|
#****************************************************************************** |