Page MenuHomePhabricator

Sudoers interface should provide an option for ALL
Closed, ResolvedPublic


Currently, the sudoers per-project interface allows creation of sudo rules with individual users or "all project users" as targets. There is no provision for a "ALL" target as project admins may wish to use.

Adding this option should be fairly trivial.

Version: unspecified
Severity: normal



Event Timeline

bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 3:34 AM
bzimport set Reference to bz68834.

What is an example of a user who is a member of ALL yet not a member of 'all project users'?

Also, 'all project users' excludes root. :-)

Having sudo policies in ldap doesn't preclude setting up sudo policies directly on the box... To the extent that system users are puppetized, it seems like their sudo policy should derive from puppet as well.

Oh, my mistake, I misunderstood what we meant by 'target' here. This makes sense after all :)

Change 153723 had a related patch set uploaded by Tim Landscheidt:
Replace support for 'ALL' in the 'Allow running as' sudo column.