Ubuntu update changes sudoers

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
User avatar
howanitz
Advanced member
Advanced member
Posts: 66
Joined: Mon Feb 01, 2016 9:27 am

Ubuntu update changes sudoers

Postby howanitz » Wed Nov 02, 2016 12:49 pm

The recent security updates for Ubuntu wants to replace the /etc/sudoers file. If you allow it to do so, Zimbra will not run properly after the required reboot. You will get errors and prompts asking you for the zimbra password when running 'zmcontrol status'. You should back up /etc/sudoers first, and then append these missing entries back into the new file:

Code: Select all

%zimbra ALL=NOPASSWD:/opt/zimbra/libexec/zmstat-fd *
%zimbra ALL=NOPASSWD:/opt/zimbra/libexec/zmslapd
%zimbra ALL=NOPASSWD:/opt/zimbra/postfix/sbin/postfix, /opt/zimbra/postfix/sbin/postalias, /opt/zimbra/postfix/sbin/qshape.pl, /opt/zimbra/postfix/sbin/postconf,/opt/zimbra/postfix/sbin/postsuper
%zimbra ALL=NOPASSWD:/opt/zimbra/libexec/zmqstat,/opt/zimbra/libexec/zmmtastatus
%zimbra ALL=NOPASSWD:/opt/zimbra/amavisd/sbin/amavis-mc
%zimbra ALL=NOPASSWD:/opt/zimbra/libexec/zmunbound
%zimbra ALL=NOPASSWD:/sbin/resolvconf *
%zimbra ALL=NOPASSWD:/opt/zimbra/libexec/zmmailboxdmgr
%zimbra ALL=NOPASSWD:/opt/zimbra/bin/zmcertmgr


I am running Release 8.6.0.GA.1153.UBUNTU14.64 UBUNTU14_64 NETWORK edition, Patch 8.6.0_P7
Last edited by howanitz on Thu Nov 03, 2016 12:46 pm, edited 1 time in total.


vchong68
Posts: 18
Joined: Sat Apr 30, 2016 4:45 am
Location: Singapore
ZCS/ZD Version: Release 8.7.11.GA.1854.UBUNTU16.64

Re: Ubuntu update changes sudoers

Postby vchong68 » Thu Nov 03, 2016 9:58 am

For proxy enabled, the last line is:
%zimbra ALL=NOPASSWD:/opt/zimbra/nginx/sbin/nginx
User avatar
jorgedlcruz
Zimbra Alumni
Zimbra Alumni
Posts: 2769
Joined: Thu May 22, 2014 4:47 pm

Re: Ubuntu update changes sudoers

Postby jorgedlcruz » Thu Nov 03, 2016 12:36 pm

Hi guys,
Which Ubuntu Releases do you have?

Best regards
Jorge de la Cruz https://jorgedelacruz.es
Technical Marketing Manager at Zimbra/Synacor https://www.zimbra.com/
User avatar
jorgedlcruz
Zimbra Alumni
Zimbra Alumni
Posts: 2769
Joined: Thu May 22, 2014 4:47 pm

Re: Ubuntu update changes sudoers

Postby jorgedlcruz » Thu Nov 03, 2016 1:33 pm

Hi guys,
We have a new wiki for this "issue", at the end while asking, it's better to select the N option, so you don't replace the sudoers, if you do at least you have now a wiki about it:

In ZCS 8.7 this doesn't happen as we have the files by service inside the/etc/sudoers.d folder

Best regards
Jorge de la Cruz https://jorgedelacruz.es
Technical Marketing Manager at Zimbra/Synacor https://www.zimbra.com/
User avatar
howanitz
Advanced member
Advanced member
Posts: 66
Joined: Mon Feb 01, 2016 9:27 am

Re: Ubuntu update changes sudoers

Postby howanitz » Thu Nov 03, 2016 2:04 pm

Thanks!

From: https://wiki.zimbra.com/wiki/Zimbra_ser ... oers_issue
Note: This will not affect Zimbra Collaboration 8.7 and ahead, as ZCS 8.7 includes the different tiles
-tiles
+files

Return to “Administrators”

Who is online

Users browsing this forum: No registered users and 16 guests