build/config/nacm_config.xml

   1 <nacm xmlns="urn:ietf:params:xml:ns:yang:ietf-netconf-acm">
   2   <enable-nacm>true</enable-nacm>
   3   <read-default>permit</read-default>
   4   <write-default>deny</write-default>
   5   <exec-default>permit</exec-default>
   6   <enable-external-groups>true</enable-external-groups>
   7   <groups>
   8     <group>
   9       <name>sudo</name>
  10       <user-name>netconf</user-name>
  11     </group>
  12   </groups>
  13   <rule-list>
  14     <name>sudo-rules</name>
  15     <group>sudo</group>
  16     <rule>
  17       <name>allow-all-sudo</name>
  18       <module-name>*</module-name>
  19       <path>/</path>
  20       <access-operations>*</access-operations>
  21       <action>permit</action>
  22       <comment>Corresponds all the rules under the sudo group as defined in O-RAN.WG4.MP.0-v05.00</comment>
  23     </rule>
  24   </rule-list>
  25 </nacm>