I have an OpenLDAP installation that manages Sudo as well. Everytime I create a sudoers role, I have to list the commands that that sudoers role can run. This leads to a lot of repetition.
Is there a way to group linux commands in a Netgroup sort of way and expand that Netgroup in LDAP sudoers role SudoCommand field? e.g: Create a Netgroup (or something else) called “view” with members /bin/ls, /usr/bin/less, /usr/bin/tail and in the SudoCommand field just enter +view.
This would be beneficial when the same commands need to be granted to various SudoRoles for different directories/files?