Cmnd_Alias VDSM_LIFECYCLE = /usr/bin/tunctl, /usr/sbin/brctl, /sbin/ip, /sbin/ethtool, /usr/share/vdsm/addNetwork, /usr/share/vdsm/delNetwork, /usr/share/vdsm/editNetwork, /usr/share/vdsm/vdsm-store-net-config, /usr/sbin/dmidecode
Cmnd_Alias VDSM_STORAGE = /bin/mount, /bin/umount, \
    /sbin/e2fsck -p *, \
    /sbin/tune2fs -j *, \
    /sbin/mke2fs -q -j *, \
    /sbin/fuser -m *, \
    /bin/chown vdsm\:kvm *, \
    /bin/mv /etc/iscsi/iscsid.conf /etc/iscsi/iscsid.conf.*, \
    /bin/mv /etc/multipath.conf *, \
    /bin/cp * /etc/iscsi/iscsid.conf, \
    /bin/cp * /etc/multipath.conf, \
    /sbin/service iscsid restart, \
    /sbin/service multipathd restart, \
    /sbin/service multipathd reload, \
    /sbin/scsi_id, \
    /sbin/iscsiadm *, \
    /usr/sbin/vgs, /usr/sbin/pvs, /usr/sbin/lvs, /usr/sbin/pvcreate, /usr/sbin/vgcreate, /usr/sbin/lvrename, /usr/sbin/lvcreate, /usr/sbin/lvextend, /usr/sbin/lvremove, /usr/sbin/vgextend, /usr/sbin/vgscan, /usr/sbin/vgmknodes, /usr/sbin/vgremove, /usr/sbin/vgcfgbackup, /usr/sbin/vgchange, /usr/sbin/lvchange, /usr/sbin/vgrename, \
    /bin/cat /sys/block/*/device/../../*, \
    /bin/cat /sys/devices/platform/host*, \
    /bin/cat /etc/iscsi/iscsid.conf, \
    /bin/cat /etc/multipath.conf, \
    /bin/dd of=/sys/class/scsi_host/host*/scan, \
    /bin/dd, \
    /usr/sbin/persist multipath.conf, \
    /usr/sbin/persist /var/log/vdsm/backup/*, \
    /usr/sbin/unpersist multipath.conf, \
    /usr/sbin/unpersist /var/log/vdsm/backup/*, \
    /bin/cp * multipath.conf *, \
    /bin/cp * /var/log/vdsm/backup/* *, \
    /sbin/dmsetup ls --target multipath, \
    /sbin/dmsetup ls, \
    /sbin/dmsetup remove *, \
    /sbin/multipath, \
    /sbin/blockdev --getsize64 *, \
    /usr/bin/setsid /usr/bin/ionice -c? -n? /bin/su vdsm -s /bin/sh -c /usr/libexec/vdsm/spmprotect.sh*, \
    /usr/bin/ionice -c? -n? /bin/su vdsm -s /bin/sh -c /bin/dd\ *, \
    /sbin/service vdsmd *, \
    /sbin/reboot -f
vdsm  ALL=(ALL) NOPASSWD: VDSM_LIFECYCLE, VDSM_STORAGE
Defaults:vdsm !requiretty
Defaults:vdsm !syslog
