Add restricted wpa_cli commands to sudoers

This commit is contained in:
billz 2023-12-02 14:00:34 +00:00
parent 20589bacf3
commit 84dc44d944

View file

@ -9,7 +9,11 @@ www-data ALL=(ALL) NOPASSWD:/bin/rm /var/run/wpa_supplicant/wl*
www-data ALL=(ALL) NOPASSWD:/sbin/wpa_cli -i wl* scan_results www-data ALL=(ALL) NOPASSWD:/sbin/wpa_cli -i wl* scan_results
www-data ALL=(ALL) NOPASSWD:/sbin/wpa_cli -i wl* scan www-data ALL=(ALL) NOPASSWD:/sbin/wpa_cli -i wl* scan
www-data ALL=(ALL) NOPASSWD:/sbin/wpa_cli -i wl* reconfigure www-data ALL=(ALL) NOPASSWD:/sbin/wpa_cli -i wl* reconfigure
www-data ALL=(ALL) NOPASSWD:/sbin/wpa_cli -i wl* select_network * www-data ALL=(ALL) NOPASSWD:/sbin/wpa_cli -i wl* add_network
www-data ALL=(ALL) NOPASSWD:/sbin/wpa_cli -i enable_network [0-9]
www-data ALL=(ALL) NOPASSWD:/sbin/wpa_cli -i wl* select_network [0-9]
www-data ALL=(ALL) NOPASSWD:/sbin/wpa_cli -i wl* set_network [0-9] *
www-data ALL=(ALL) NOPASSWD:/sbin/wpa_cli -i wl* remove_network [0-9]
www-data ALL=(ALL) NOPASSWD:/bin/cp /tmp/hostapddata /etc/hostapd/hostapd.conf www-data ALL=(ALL) NOPASSWD:/bin/cp /tmp/hostapddata /etc/hostapd/hostapd.conf
www-data ALL=(ALL) NOPASSWD:/bin/systemctl start hostapd.service www-data ALL=(ALL) NOPASSWD:/bin/systemctl start hostapd.service
www-data ALL=(ALL) NOPASSWD:/bin/systemctl stop hostapd.service www-data ALL=(ALL) NOPASSWD:/bin/systemctl stop hostapd.service