init

webconfig/scripts/buttontask.sudoers

@@ -0,0 +1,12 @@
+# ButtonTask: allow the unprivileged web configurator to run only the three
+# tightly-scoped helper scripts as root, without a password.
+#
+# Install:
+#   sudo install -m 0440 buttontask.sudoers /etc/sudoers.d/buttontask
+#   sudo visudo -cf /etc/sudoers.d/buttontask   # validate
+#
+# The scripts themselves must be root-owned and not writable by others:
+#   sudo chown root:root /opt/buttontask/scripts/bt-*
+#   sudo chmod 0755 /opt/buttontask/scripts/bt-*
+
+buttontask ALL=(root) NOPASSWD: /opt/buttontask/scripts/bt-netconfig, /opt/buttontask/scripts/bt-update, /opt/buttontask/scripts/bt-service