StephanSainleger
/
0k-charms
forked from 0k/0k-charms
1
1
Fork 0
Code Issues Pull Requests Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
440 Commits
13 Branches
0 Tags
107 MiB
Tree: be42bd9076
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'be42bd9076'
${ noResults }
0k-charms/rsync-backup-target/build/src/etc/sudoers.d/recover

7 lines
345 B
Raw Normal View History

new: [rsync-backup-target] add recover key mechanism This allows to get a one-time credential to have read access on specified backup slot. Signed-off-by: Valentin Lab <valentin.lab@kalysto.org>
3 years ago
​
​
​
​
​
​
  1. ## allow admin users to request a recovery key, this is really not
  2. ## sufficient, but the real check is done on the
  3. ## ``ssh-admin-cmd-validate`` side.
  5. %rsync ALL=(root) NOPASSWD: /usr/local/sbin/request-recovery-key *
  6. %rsync ALL=(root) NOPASSWD: /bin/touch /etc/rsync/keys/recover/*
  7. %rsync ALL=(root) NOPASSWD: /usr/local/sbin/ssh-update-keys