diff --git a/salt/files/master.d/f_defaults.conf b/salt/files/master.d/f_defaults.conf index 40761c7..a2e4229 100644 --- a/salt/files/master.d/f_defaults.conf +++ b/salt/files/master.d/f_defaults.conf @@ -351,7 +351,7 @@ publisher_acl: {%- endfor -%} {% elif 'client_acl' in cfg_master -%} {%- do default_keys.append('client_acl') %} -client_acl: +publisher_acl: {%- for name, user in cfg_master['client_acl']|dictsort %} {{ name}}: {%- for command in user %} @@ -359,7 +359,7 @@ client_acl: {%- endfor -%} {%- endfor -%} {% elif 'client_acl' in cfg_salt -%} -client_acl: +publisher_acl: {%- for name, user in cfg_salt['client_acl']|dictsort %} {{ name }}: {%- for command in user %} @@ -401,7 +401,7 @@ publisher_acl_blacklist: {% endfor %} {% elif 'client_acl_blacklist' in cfg_master %} {%- do default_keys.append('client_acl_blacklist') %} -client_acl_blacklist: +publisher_acl_blacklist: users: {% for user in cfg_master['client_acl_blacklist'].get('users', []) %} - {{ user }} @@ -411,7 +411,7 @@ client_acl_blacklist: - {{ mod }} {% endfor %} {% elif 'client_acl_blacklist' in cfg_salt %} -client_acl_blacklist: +publisher_acl_blacklist: users: {% for user in cfg_salt['client_acl_blacklist'].get('users', []) %} - {{ user }} @@ -421,7 +421,7 @@ client_acl_blacklist: - {{ mod }} {% endfor %} {% else %} -#client_acl_blacklist: +#publisher_acl_blacklist: # users: # - root # - '^(?!sudo_).*$' # all non sudo users @@ -429,7 +429,7 @@ client_acl_blacklist: # - cmd {% endif %} -# Enforce client_acl & client_acl_blacklist when users have sudo +# Enforce publisher_acl & publisher_acl_blacklist when users have sudo # access to the salt command. {{ get_config('sudo_acl', 'False') }}