[jira] [Resolved] (AMBARI-11947) ambari-agent 2.0.1 overwrites /etc/sudoers.d/ambar-agent if it is exists

["Andrew Onischuk (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/AMBARI-11947?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andrew Onischuk resolved AMBARI-11947.
--------------------------------------
    Resolution: Fixed

Committed to trunk and branch-2.1

>  ambari-agent 2.0.1 overwrites /etc/sudoers.d/ambar-agent if it is exists 
> --------------------------------------------------------------------------
>
>                 Key: AMBARI-11947
>                 URL: https://issues.apache.org/jira/browse/AMBARI-11947
>             Project: Ambari
>          Issue Type: Bug
>            Reporter: Andrew Onischuk
>            Assignee: Andrew Onischuk
>             Fix For: 2.1.0
>
>
> PROBLEM: There are several issues related to the Ambari-Agent and the
> /etc/sudoers file. Below are the issues:
> 1) Installation of the ambari-agent rpm should _not_ overwrite /etc/sudoers.d
> /ambari-agent if it exists as it does now
> 2) The presence of a Defaults directive after any other directive in a sudoers
> config stream is not honored. If /etc/sudoers.d/* files are included after a
> non-Defaults directive in the main /etc/sudoers file, the Defaults entries in
> any of the included files will not apply. Where #include directives are
> specified in /etc/sudoers is highly site dependent. The file as added by the
> rpm contains:
> Defaults:root !requiretty
> 3) Warnings are being suppressed indiscriminately for all root sudo commands
> on an entire system. Customer suggestion is that Ambari should not be running
> commands as root, but as other HW users e.g.:
> sudo -u hadoop <command>  
> sudo -u hbase <ccommand>
> BUSINESS IMPACT: The #include derivatives are highly site dependent for the
> customer. This is a development environment.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)