I'm having a hard time wrapping my head around FreeIPA's model. The FreeIPA manual states:
FreeIPA adds an extra control measure with sudo command groups, which allow a group of commands to be defined and then applied to the sudo configuration as one.
But their examples basically talk about creating a sudo command group and adding particular sudo commands like
less to a "files" sudo command group.
e.g. from the commandline:
ipa sudocmdgroup-add --desc 'File editing commands' files ipa sudocmd-add --desc 'For editing files' '/usr/bin/vim' ipa sudocmdgroup-add-member --sudocmds '/usr/bin/vim' files
But how do you specify
ALL like you would in /etc/sudoers? Can this be wildcarded (e.g. *)?