summaryrefslogtreecommitdiffstats
path: root/debian/frr.postinst
diff options
context:
space:
mode:
authorDonald Sharp <sharpd@cumulusnetworks.com>2017-05-09 22:18:04 +0200
committerDonald Sharp <sharpd@cumulusnetworks.com>2017-05-09 22:19:48 +0200
commite08dde01c513a6480b56b7cc70d8c9dcc793f076 (patch)
treed47e8af151ab6799a2441ff99b9819a9188efb9b /debian/frr.postinst
parentMerge pull request #462 from donaldsharp/poll_3.0 (diff)
downloadfrr-e08dde01c513a6480b56b7cc70d8c9dcc793f076.tar.xz
frr-e08dde01c513a6480b56b7cc70d8c9dcc793f076.zip
*: Remove ability to install frr_sudoers
If the user were to uncomment last line and allow VTYSH_SHOW to be used as a non-root account, this would allow arbitrary command completion inside of vtysh via multiple -c ... -c .... lines Signed-off-by: Donald Sharp <sharpd@cumulusnetworks.com>
Diffstat (limited to 'debian/frr.postinst')
-rw-r--r--debian/frr.postinst1
1 files changed, 0 insertions, 1 deletions
diff --git a/debian/frr.postinst b/debian/frr.postinst
index 43d3ffa9e..9020d7bf7 100644
--- a/debian/frr.postinst
+++ b/debian/frr.postinst
@@ -15,7 +15,6 @@ frrvtygid=`egrep "^frrvty:" $GROUPFILE | awk -F ":" '{ print $3 }'`
chown -R ${frruid}:${frrgid} /etc/frr
touch /etc/frr/vtysh.conf
chgrp ${frrvtygid} /etc/frr/vtysh*
-chmod 440 /etc/sudoers.d/frr_sudoers
chmod 644 /etc/frr/*
ENVIRONMENTFILE=/etc/environment