[AMBARI-11947] ambari-agent 2.0.1 overwrites /etc/sudoers.d/ambar-agent if it is exists

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.1.0
• Assignee: Andrew Onischuk
• Reporter: Andrew Onischuk
• Created: 16/Jun/15 13:42
• Updated: 16/Jun/15 16:15
• Resolved: 16/Jun/15 13:48

Description

PROBLEM: There are several issues related to the Ambari-Agent and the
/etc/sudoers file. Below are the issues:

1) Installation of the ambari-agent rpm should not overwrite /etc/sudoers.d
/ambari-agent if it exists as it does now

2) The presence of a Defaults directive after any other directive in a sudoers
config stream is not honored. If /etc/sudoers.d/* files are included after a
non-Defaults directive in the main /etc/sudoers file, the Defaults entries in
any of the included files will not apply. Where #include directives are
specified in /etc/sudoers is highly site dependent. The file as added by the
rpm contains:

Defaults:root !requiretty

3) Warnings are being suppressed indiscriminately for all root sudo commands
on an entire system. Customer suggestion is that Ambari should not be running
commands as root, but as other HW users e.g.:

sudo -u hadoop <command>
sudo -u hbase <ccommand>

BUSINESS IMPACT: The #include derivatives are highly site dependent for the
customer. This is a development environment.

Issue Links

• links to: ReviewBoard