Sudoers violation

[David O Neill]

telegraf rev 40

/var/mail being spammed with

[code]
From <email address hidden> Thu Feb 18 10:25:45 2021
Return-Path: <email address hidden>
X-Original-To: root
Delivered-To: <email address hidden>
Received: by juju-847cde-9-lxd-2.eu-west-2.compute.internal (Postfix, from userid 999)
        id 3ED451F81FA; Thu, 18 Feb 2021 10:25:45 +0000 (UTC)
To: <email address hidden>
From: <email address hidden>
Auto-Submitted: auto-generated
Subject: *** SECURITY information for juju-847cde-9-lxd-2 ***
Message-Id: <email address hidden>
Date: Thu, 18 Feb 2021 10:25:45 +0000 (UTC)

juju-847cde-9-lxd-2 : Feb 18 10:25:45 : telegraf : user NOT in sudoers ; TTY=unknown ; PWD=/ ; USER=root ; COMMAND=ovs-appctl dpctl/show -s
[/code]

# Quietened it for now with
juju run -a telegraf "sudo sed 's/Defaults.*mail_badpass/#Defaults mail_badpass/' -i /etc/sudoers"

[Peter Sabaini (peter-sabaini)]

I believe the mail spam we were seeing originated from a previous version of telegraf and simply was stuck here as it wasn't deliverable. With rev 40 of the charm the fix from bug #1891781 is included and I'm seeing no new sudoer issues.

I'll close this as invalid