1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
{
"version": "4.0.0",
"roles": [
{
"name": "r_root",
"actors": [
{
"type": "user",
"name": "ROOTADMINISTRATOR"
},
{
"type": "user",
"name": "root"
}
],
"tasks": [
{
"options": {
"workdir": {
"default": "all"
},
"env": {
"override_behavior": true
}
},
"name": "t_root",
"purpose": "access to every commands",
"cred": {
"setuid": {
"fallback": "root",
"default": "all"
},
"setgid": {
"fallback": "root",
"default": "all"
},
"capabilities": {
"default": "all",
"sub": ["CAP_LINUX_IMMUTABLE"]
}
},
"commands": "all"
},
{
"name": "t_chsr",
"purpose": "Configure RootAsRole",
"cred": {
"setuid": "root",
"setgid": "root",
"capabilities": ["CAP_LINUX_IMMUTABLE"]
},
"commands": ["/usr/bin/chsr ^.*$"]
}
]
}
]
}