From e89997288e2f9e411c32a80cf586a6265a9d9e14 Mon Sep 17 00:00:00 2001 From: yangyan Date: Thu, 5 Mar 2020 11:15:39 +0800 Subject: Remove sudo capability for onap user for VF-C ems docker Change-Id: I5f327ea36125bbed257998c644cb1af4ef29b16e Issue-ID: VFC-1640 Signed-off-by: yangyan --- .../src/main/assembly/docker/docker-env-config.sh | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/ems/microservice-standalone/src/main/assembly/docker/docker-env-config.sh b/ems/microservice-standalone/src/main/assembly/docker/docker-env-config.sh index 9cfdeea..c3a16c3 100644 --- a/ems/microservice-standalone/src/main/assembly/docker/docker-env-config.sh +++ b/ems/microservice-standalone/src/main/assembly/docker/docker-env-config.sh @@ -22,11 +22,9 @@ install_sf(){ add_user(){ useradd onap - yum -y install sudo - chmod u+x /etc/sudoers - sed -i '/Same thing without a password/a\onap ALL=(ALL:ALL) NOPASSWD:ALL' /etc/sudoers - chmod u-x /etc/sudoers chown onap:onap -R /service + chmod g+s /service + setfacl -d --set u:onap:rwx /service } clean_sf_cache(){ -- cgit 1.2.3-korg