[Machinery] Inspecting remote system: machinery user

Matwey V. Kornilov matwey.kornilov at gmail.com
Thu Jul 23 03:22:49 MDT 2015


Hello,

https://github.com/SUSE/machinery/blob/master/man/machinery-inspect.1.md 
says that:

"When inspecting as non-root the user has to have the following command 
whitelist given in the sudoers file:

machinery ALL=(ALL) NOPASSWD: 
/usr/bin/find,/usr/bin/cat,/bin/cat,/usr/bin/rsync,/bin/rpm -V 
*,/bin/tar --create *"

It would be also great to specify recommended secure way to create 
machinery user. I've done the following:

machinery:x:492:490::/var/lib/machinery:/bin/bash

but not sure whether it really needs bash as default shell? It would be 
also great to add such a user to SUSE installations by default in future.



More information about the Machinery mailing list