From c619ba8ab1e74120e4891d7a19bf2d0f8bec9bb3 Mon Sep 17 00:00:00 2001 From: "Jory A. Pratt" Date: Sun, 15 Feb 2026 21:56:32 -0600 Subject: [PATCH 4/8] fix: update sudoers to include cp, chown, chmod, playglobal - announcement.php requires cp/chown/chmod for .ul file install - globalplay.php requires playglobal.sh - Align repo file with announcement_manager.sh requirements --- 99-supermon-announcements | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/99-supermon-announcements b/99-supermon-announcements index c149b40..058d57a 100644 --- a/99-supermon-announcements +++ b/99-supermon-announcements @@ -1,6 +1,7 @@ # /etc/sudoers.d/99-supermon-announcements # Supermon Announcements Manager - N5AD # Passwordless sudo for www-data to run required commands only +# This file is managed by announcement_manager.sh - do not edit manually # Created/updated: January 2026 # Allow running playaudio.sh (announcement playback) @@ -12,6 +13,11 @@ www-data ALL=(root) NOPASSWD: /usr/bin/crontab # Allow running audio_convert.sh (MP3 to .ul conversion) www-data ALL=(root) NOPASSWD: /etc/asterisk/local/audio_convert.sh -# NO OTHER COMMANDS ALLOWED - do NOT add /bin/cp, /bin/chown, /bin/chmod -# These are dangerous if unrestricted +# Required for copying .ul files to Asterisk sounds dir (announcement.php) +www-data ALL=(ALL) NOPASSWD: /bin/cp, /bin/chown, /bin/chmod + +# Piper TTS (text-to-speech generation) www-data ALL=(root) NOPASSWD: /usr/local/bin/piper_prompt_tts.sh + +# Global playback (rpt playback to linked nodes) +www-data ALL=(ALL) NOPASSWD: /etc/asterisk/local/playglobal.sh -- 2.47.3