ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Onischuk (JIRA)" <>
Subject [jira] [Resolved] (AMBARI-11947) ambari-agent 2.0.1 overwrites /etc/sudoers.d/ambar-agent if it is exists
Date Tue, 16 Jun 2015 13:49:01 GMT


Andrew Onischuk resolved AMBARI-11947.
    Resolution: Fixed

Committed to trunk and branch-2.1

>  ambari-agent 2.0.1 overwrites /etc/sudoers.d/ambar-agent if it is exists 
> --------------------------------------------------------------------------
>                 Key: AMBARI-11947
>                 URL:
>             Project: Ambari
>          Issue Type: Bug
>            Reporter: Andrew Onischuk
>            Assignee: Andrew Onischuk
>             Fix For: 2.1.0
> PROBLEM: There are several issues related to the Ambari-Agent and the
> /etc/sudoers file. Below are the issues:
> 1) Installation of the ambari-agent rpm should _not_ overwrite /etc/sudoers.d
> /ambari-agent if it exists as it does now
> 2) The presence of a Defaults directive after any other directive in a sudoers
> config stream is not honored. If /etc/sudoers.d/* files are included after a
> non-Defaults directive in the main /etc/sudoers file, the Defaults entries in
> any of the included files will not apply. Where #include directives are
> specified in /etc/sudoers is highly site dependent. The file as added by the
> rpm contains:
> Defaults:root !requiretty
> 3) Warnings are being suppressed indiscriminately for all root sudo commands
> on an entire system. Customer suggestion is that Ambari should not be running
> commands as root, but as other HW users e.g.:
> sudo -u hadoop <command>  
> sudo -u hbase <ccommand>
> BUSINESS IMPACT: The #include derivatives are highly site dependent for the
> customer. This is a development environment.

This message was sent by Atlassian JIRA

View raw message