Ubuntu update changes sudoers

[howanitz]

The recent security updates for Ubuntu wants to replace the /etc/sudoers file. If you allow it to do so, Zimbra will not run properly after the required reboot. You will get errors and prompts asking you for the zimbra password when running 'zmcontrol status'. You should back up /etc/sudoers first, and then append these missing entries back into the new file:

Code: Select all

%zimbra ALL=NOPASSWD:/opt/zimbra/libexec/zmstat-fd *
%zimbra ALL=NOPASSWD:/opt/zimbra/libexec/zmslapd
%zimbra ALL=NOPASSWD:/opt/zimbra/postfix/sbin/postfix, /opt/zimbra/postfix/sbin/postalias, /opt/zimbra/postfix/sbin/qshape.pl, /opt/zimbra/postfix/sbin/postconf,/opt/zimbra/postfix/sbin/postsuper
%zimbra ALL=NOPASSWD:/opt/zimbra/libexec/zmqstat,/opt/zimbra/libexec/zmmtastatus
%zimbra ALL=NOPASSWD:/opt/zimbra/amavisd/sbin/amavis-mc
%zimbra ALL=NOPASSWD:/opt/zimbra/libexec/zmunbound
%zimbra ALL=NOPASSWD:/sbin/resolvconf *
%zimbra ALL=NOPASSWD:/opt/zimbra/libexec/zmmailboxdmgr
%zimbra ALL=NOPASSWD:/opt/zimbra/bin/zmcertmgr

I am running Release 8.6.0.GA.1153.UBUNTU14.64 UBUNTU14_64 NETWORK edition, Patch 8.6.0_P7

[vchong68]

For proxy enabled, the last line is:
%zimbra ALL=NOPASSWD:/opt/zimbra/nginx/sbin/nginx

[jorgedlcruz]

Hi guys,
Which Ubuntu Releases do you have?

Best regards

[jorgedlcruz]

Hi guys,
We have a new wiki for this "issue", at the end while asking, it's better to select the N option, so you don't replace the sudoers, if you do at least you have now a wiki about it:

• https://wiki.zimbra.com/wiki/Zimbra_ser ... oers_issue

In ZCS 8.7 this doesn't happen as we have the files by service inside the/etc/sudoers.d folder

Best regards

[howanitz]

Thanks!

From: https://wiki.zimbra.com/wiki/Zimbra_ser ... oers_issue
Note: This will not affect Zimbra Collaboration 8.7 and ahead, as ZCS 8.7 includes the different tiles
-tiles
+files