# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
# 1.11 2009/04/27 11:15:02
# $Revision: 1.12 $ $Date: 2009/04/30 03:59:11 $

# Host alias specification

# User alias specification
User_Alias SMX = smxd

# Cmnd alias specification
Cmnd_Alias SMX_START = /etc/init.d/smx-auth start
Cmnd_Alias SMX_STOP = /etc/init.d/smx-auth stop
Cmnd_Alias PGSQL_START = /etc/init.d/postgresql-smx start
Cmnd_Alias PGSQL_STOP = /etc/init.d/postgresql-smx stop
Cmnd_Alias PGPOOL_START = /etc/init.d/pgpool-smx start
Cmnd_Alias PGPOOL_STOP = /etc/init.d/pgpool-smx stop
Cmnd_Alias SSH_START = /etc/init.d/sshd start
Cmnd_Alias CRON_START = /etc/init.d/crond start
Cmnd_Alias CRON_STOP = /etc/init.d/crond stop
Cmnd_Alias RADIUS_START = /etc/init.d/radiusd start
Cmnd_Alias RADIUS_STOP = /etc/init.d/radiusd stop
Cmnd_Alias ADMIN_START = /etc/init.d/smx-admin start
Cmnd_Alias ADMIN_STOP = /etc/init.d/smx-admin stop

Cmnd_Alias DO_PG_DUMP = /opt/cse/smx/admin/servlet/webapps/admin/doPgdump.sh
Cmnd_Alias DO_LOG_ARCHIVE = /opt/cse/smx/admin/servlet/webapps/admin/doLogArchive.sh
Cmnd_Alias CLIENTS_CONF_WRITE = /opt/cse/smx/admin/servlet/webapps/admin/doClientsConfWrite.sh

Cmnd_Alias CHECK_TOMCAT = /opt/cse/smx/common/bin/monitor/check_tomcat.sh
Cmnd_Alias CHECK_PROCESS = /opt/cse/smx/common/bin/monitor/check_process.sh
Cmnd_Alias CHECK_PS_FATAL = /opt/cse/smx/common/bin/monitor/check_ps_fatal.sh
Cmnd_Alias CAPACITY_CHECK = /opt/cse/smx/common/bin/monitor/capacity_check.sh

Cmnd_Alias BACKUP_OP = /backup/bin/backup_op.sh
Cmnd_Alias BACKUP_EX = /backup/bin/backup_ex.sh

Cmnd_Alias RADIUS_SETTING = /opt/cse/smx/admin/bin/util/radius_setting.sh
Cmnd_Alias CTRAN_TIMEOUT_SETTING = /opt/cse/smx/admin/bin/util/ctran_timeout_setting.sh
Cmnd_Alias AUTO_ATKCANCEL_REGIST = /opt/cse/smx/admin/bin/util/attacklock_auto_cancel_registcron.sh

Cmnd_Alias CHECK_SYNCDB_BYSELECT = /opt/cse/smx/admin/bin/util/check_syncDB_bySelect.sh
Cmnd_Alias CHECK_REPLICATION_ENABLED = /opt/cse/smx/admin/bin/util/check_replication_enabled.sh

Cmnd_Alias SUDO_WRAPPER = /opt/cse/smx/setup/bin/sudo_wrapper.sh

Cmnd_Alias LOG_COLLECT = /backup/bin/log_collect.sh

# Defaults specification
Defaults !env_reset

# User privilege specification
root	ALL=(ALL) ALL

SMX ALL = NOPASSWD: SMX_START
SMX ALL = NOPASSWD: SMX_STOP
SMX ALL = NOPASSWD: PGSQL_START
SMX ALL = NOPASSWD: PGSQL_STOP
SMX ALL = NOPASSWD: PGPOOL_START
SMX ALL = NOPASSWD: PGPOOL_STOP
SMX ALL = NOPASSWD: SSH_START
SMX ALL = NOPASSWD: CRON_START
SMX ALL = NOPASSWD: CRON_STOP
SMX ALL = NOPASSWD: RADIUS_START
SMX ALL = NOPASSWD: RADIUS_STOP
SMX ALL = NOPASSWD: ADMIN_START
SMX ALL = NOPASSWD: ADMIN_STOP

SMX ALL = NOPASSWD: DO_PG_DUMP
SMX ALL = NOPASSWD: DO_LOG_ARCHIVE
SMX ALL = NOPASSWD: CLIENTS_CONF_WRITE

SMX ALL = NOPASSWD: CHECK_TOMCAT
SMX ALL = NOPASSWD: CHECK_PROCESS
SMX ALL = NOPASSWD: CHECK_PS_FATAL
SMX ALL = NOPASSWD: CAPACITY_CHECK

SMX ALL = NOPASSWD: BACKUP_OP
SMX ALL = NOPASSWD: BACKUP_EX

SMX ALL = NOPASSWD: RADIUS_SETTING
SMX ALL = NOPASSWD: CTRAN_TIMEOUT_SETTING
SMX ALL = NOPASSWD: AUTO_ATKCANCEL_REGIST

SMX ALL = NOPASSWD: CHECK_SYNCDB_BYSELECT
SMX ALL = NOPASSWD: CHECK_REPLICATION_ENABLED

SMX ALL = NOPASSWD: SUDO_WRAPPER

SMX ALL = NOPASSWD: LOG_COLLECT

# Uncomment to allow people in group wheel to run all commands
# %wheel	ALL=(ALL)	ALL

# Same thing without a password
# %wheel	ALL=(ALL)	NOPASSWD: ALL

# Samples
# %users  ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users  localhost=/sbin/shutdown -h now

