[Spacewalk-list] Spacewalk sudoers file

[Michael Mraka]

Eric:
> Question.  Can anyone tell me the ramifications of removing the sudoers file from spacewalk?  The spacewalk install adds a cmd group to sudoers that allows apache to run 4 commands as root. Sudoers has been dissallowed in my environment.   In reviewing the documentation, it isn't clear if it's necessary only for performing functions as a user through the gui, or if it's needed to run.  I will be testing the removal next week, but wanted to see if anybody else had done this.

Hello Eric,

You won't be able to reconfigure and restart spacewalk server from WebUI.
(WebUI runs as apache/tomcat user while restart needs root privs.)

Regards,

--
Michael Mráka
System Management Engineering, Red Hat