summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authoryangyan <yangyanyj@chinamobile.com>2020-03-05 11:15:39 +0800
committeryangyan <yangyanyj@chinamobile.com>2020-03-05 11:17:18 +0800
commite89997288e2f9e411c32a80cf586a6265a9d9e14 (patch)
tree1ec18475079752236c90d692aaa89b8e0d2e457a
parent00f47e25d32634b6076fc115a3aeb8a3cecd37ce (diff)
Remove sudo capability for onap user for VF-C ems docker1.3.1
Change-Id: I5f327ea36125bbed257998c644cb1af4ef29b16e Issue-ID: VFC-1640 Signed-off-by: yangyan <yangyanyj@chinamobile.com>
-rw-r--r--ems/microservice-standalone/src/main/assembly/docker/docker-env-config.sh6
1 files changed, 2 insertions, 4 deletions
diff --git a/ems/microservice-standalone/src/main/assembly/docker/docker-env-config.sh b/ems/microservice-standalone/src/main/assembly/docker/docker-env-config.sh
index 9cfdeea..c3a16c3 100644
--- a/ems/microservice-standalone/src/main/assembly/docker/docker-env-config.sh
+++ b/ems/microservice-standalone/src/main/assembly/docker/docker-env-config.sh
@@ -22,11 +22,9 @@ install_sf(){
add_user(){
useradd onap
- yum -y install sudo
- chmod u+x /etc/sudoers
- sed -i '/Same thing without a password/a\onap ALL=(ALL:ALL) NOPASSWD:ALL' /etc/sudoers
- chmod u-x /etc/sudoers
chown onap:onap -R /service
+ chmod g+s /service
+ setfacl -d --set u:onap:rwx /service
}
clean_sf_cache(){