MotorSignal-App/backend/motorsignal_api/docs/ops-actions/sudoers-fragment

7 lines
322 B
Plaintext

# MotorSignal Operations Action Execution Sudoers Fragment
# Place at: /etc/sudoers.d/motorsignal-ops-actions
# Ownership: root:root, Mode: 0440
# Permit motorsignal service account to execute ONLY the canonical helper script
motorsignal ALL=(root) NOPASSWD: /opt/motorsignal/current/backend/scripts/ops-action-helper.sh