From 2fdfd392f8cc231b2e1c15acbb26bfe2a751f32b Mon Sep 17 00:00:00 2001 From: Tim Flink Date: Tue, 19 May 2015 19:13:03 +0000 Subject: [PATCH] fixing git binary paths for sudo --- roles/phabricator/tasks/main.yml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/roles/phabricator/tasks/main.yml b/roles/phabricator/tasks/main.yml index dceda23002..d31f1c9b30 100644 --- a/roles/phabricator/tasks/main.yml +++ b/roles/phabricator/tasks/main.yml @@ -32,11 +32,17 @@ when: enable_phabricator_git - name: add vcs user to sudoers to write as daemon user with restrictions for git - lineinfile: "dest=/etc/sudoers state=present line='{{ phabricator_vcs_user }} ALL=({{ phabricator_daemon_user }}) SETENV: NOPASSWD: /usr/bin/git-upload-pack, /usr/bin/git-receive-pack'" + lineinfile: "dest=/etc/sudoers state=present line='{{ phabricator_vcs_user }} ALL=({{ phabricator_daemon_user }}) SETENV: NOPASSWD: /usr/libexec/git-core/git-upload-pack, /usr/libexec/git-core/git-receive-pack'" - name: remove tty requirement for sudo by git user lineinfile: "dest=/etc/sudoers state=present line='Defaults:{{phabricator_vcs_user }} !requiretty'" +- name: add apache user to sudoers to write as daemon user with restrictions for git + lineinfile: "dest=/etc/sudoers state=present line='apache ALL=({{ phabricator_daemon_user }}) SETENV: NOPASSWD: /usr/libexec/git-core/git-http-backend'" + +- name: remove tty requirement for sudo by git user + lineinfile: "dest=/etc/sudoers state=present line='Defaults:apache !requiretty'" + - name: update php.ini copy: src=php.ini dest=/etc/php.d/php.ini owner=root group=root mode=0644 notify: