crans_bcfg2/Rules/rules.xml
2015-05-10 15:19:17 +02:00

37 lines
1.5 KiB
XML

<Rules priority="1">
<Group name="users">
<Path name="/etc/crans/secrets" type="directory" owner="respbats" group="adm" mode="0550"/>
</Group>
<Group name="vo">
<Path name="/etc/crans/secrets" type="directory" owner="respbats" group="adm" mode="0550"/>
</Group>
<Group name="mail-mx-main">
<Action name="postfix-to-sasl" timing="post" when="modified" status="check" command="adduser postfix sasl"/>
<Action name="postfix-link-sasl" timing="post" when="modified" status="check" command="ln -sf /var/spool/postfix/var/run/saslauthd /var/run/saslauthd"/>
</Group>
<Group name="users" negate="true">
<Group name="vo" negate="true">
<Path name="/etc/crans/secrets" type="directory" owner="root" group="adm" mode="0550"/>
</Group>
</Group>
<Path name="/usr/scripts" type="directory" owner="root" group="adm" mode="2775"/>
<!-- Suppression du groupe adm de /etc/group pour forcer sudo à regarder dans la base -->
<Action name="del-adm"
timing="post" when="modified" status="check"
command="! grep -q '^adm:' /etc/group ||
{ a=$(mktemp) &amp;&amp;
awk -F':' '$1 != &quot;adm&quot;' /etc/group > $a &amp;&amp;
mv $a /etc/group &amp;&amp;
rm -f $a &amp;&amp;
grpconv; }"/>
<Action name="ln-attendre-vert" timing="post" when="modified" status="check"
command="ln -s /etc/init.d/attendre-vert /etc/rcS.d/S41attendre-vert" />
<Path name="/usr/lib/python2.7/dist-packages/MoinMoin/script/export/dump_proxy.py" type="symlink" to="/usr/scripts/wiki/dump_proxy.py" />
</Rules>