From 54f54a05ab6b895b9d24beb7f802a3974ab9edc2 Mon Sep 17 00:00:00 2001 From: "srvproxy001.itguys.com.br" Date: Wed, 17 Sep 2025 11:19:40 -0300 Subject: [PATCH] =?UTF-8?q?[Auto-Sync]=20Atualiza=C3=A7=C3=A3o=20das=20con?= =?UTF-8?q?figura=C3=A7=C3=B5es=20em=20srvproxy001.itguys.com.br=20-=20202?= =?UTF-8?q?5-09-17=2011:19:40?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- _automation_scripts/etc/proxy-sinc/paths.conf | 8 ++++++- sudoers.d/README | 24 +++++++++++++++++++ sudoers.d/zabbix-fail2ban | 1 + 3 files changed, 32 insertions(+), 1 deletion(-) create mode 100644 sudoers.d/README create mode 100644 sudoers.d/zabbix-fail2ban diff --git a/_automation_scripts/etc/proxy-sinc/paths.conf b/_automation_scripts/etc/proxy-sinc/paths.conf index c1e719f..1bdf819 100644 --- a/_automation_scripts/etc/proxy-sinc/paths.conf +++ b/_automation_scripts/etc/proxy-sinc/paths.conf @@ -3,4 +3,10 @@ /etc/nginx /etc/fail2ban /etc/ssl - +/etc/resolv.conf +/etc/nsswitch.conf +/etc/hosts +/etc/ufw +/etc/zabbix +/etc/sudoers.d +/etc/tmpfiles.d diff --git a/sudoers.d/README b/sudoers.d/README new file mode 100644 index 0000000..356d882 --- /dev/null +++ b/sudoers.d/README @@ -0,0 +1,24 @@ +# +# The default /etc/sudoers file created on installation of the +# sudo package now includes the directive: +# +# @includedir /etc/sudoers.d +# +# This will cause sudo to read and parse any files in the /etc/sudoers.d +# directory that do not end in '~' or contain a '.' character. +# +# Note that there must be at least one file in the sudoers.d directory (this +# one will do). +# +# Note also, that because sudoers contents can vary widely, no attempt is +# made to add this directive to existing sudoers files on upgrade. Feel free +# to add the above directive to the end of your /etc/sudoers file to enable +# this functionality for existing installations if you wish! Sudo +# versions older than the one in Debian 11 (bullseye) require the +# directive will only support the old syntax #includedir, and the current +# sudo will happily accept both @includedir and #includedir +# +# Finally, please note that using the visudo command is the recommended way +# to update sudoers content, since it protects against many failure modes. +# See the man page for visudo and sudoers for more information. +# diff --git a/sudoers.d/zabbix-fail2ban b/sudoers.d/zabbix-fail2ban new file mode 100644 index 0000000..d8abd4f --- /dev/null +++ b/sudoers.d/zabbix-fail2ban @@ -0,0 +1 @@ +zabbix ALL=NOPASSWD: /usr/bin/fail2ban-client