#MISC 
restricteduser ALL=(root) /usr/bin/id -au
restricteduser ALL=(root) /usr/bin/whoami
 
#MKDIR
restricteduser ALL=(root) /bin/mkdir -p /opt/veeam
 
#Check host type
restricteduser ALL=(root) /bin/uname --machine
restricteduser ALL=(root) /bin/uname -r
restricteduser ALL=(root) /bin/ls /etc/exagrid-veeam-version
restricteduser ALL=(root) /bin/ls /tmp/Veeam_enabled
restricteduser ALL=(root) /bin/ls /tmp/Veeam_enabled_Infinidat
restricteduser ALL=(root) /bin/ls /tmp/Veeam_enabled_Fujitsu
restricteduser ALL=(root) /bin/ls /tmp/Veeam_enabled*
 
#RM
restricteduser ALL=(root) /bin/rmdir /opt/veeam
restricteduser ALL=(root) /bin/rmdir /opt/veeam/Upload
restricteduser ALL=(root) /bin/rm -rf /opt/veeam/deployment*
restricteduser ALL=(root) /usr/bin/rm /opt/veeam/veeaminstaller
 
#DEPLOYMENT SERVICE
restricteduser ALL=(root) /opt/veeam/deployment/veeamdeploymentsvc --dll-version
restricteduser ALL=(root) /opt/veeam/deployment/veeamdeploymentsvc --get-port
restricteduser ALL=(root) /opt/veeam/deployment/veeamdeploymentsvc --uninstall
restricteduser ALL=(root) /opt/veeam/deployment/veeamdeploymentsvc --set-user restricteduser
restricteduser ALL=(root) /opt/veeam/deployment/veeamdeploymentsvc --disable-restricted-mode
restricteduser ALL=(root) /opt/veeam/deployment/veeamdeploymentsvc --set-base-log-path /var/log/VeeamBackup
restricteduser ALL=(root) /opt/veeam/deployment/veeamdeploymentsvc --restart
restricteduser ALL=(root) /opt/veeam/deployment/veeamdeploymentsvc --get-fingerprint
restricteduser ALL=(root) /opt/veeam/deployment/veeamdeploymentsvc --install 6160
restricteduser ALL=(root) /opt/veeam/deployment/veeamdeploymentsvc --install-server-certificate /tmp/VeeamUpload*/ServerCertificate
restricteduser ALL=(root) /opt/veeam/deployment/veeamdeploymentsvc --install-certificate /tmp/VeeamUpload*/ClientCertificate
restricteduser ALL=(root) /opt/veeam/deployment/veeamdeploymentsvc --set-max-log-size 10485760
restricteduser ALL=(root) /opt/veeam/deployment/veeamdeploymentsvc --set-max-log-count 10
restricteduser ALL=(root) /opt/veeam/deployment/veeamdeploymentsvc --get-bios-uuid
 
#TRANSPORT
restricteduser ALL=(root) /opt/veeam/transport/veeamtransport --version
restricteduser ALL=(root) /opt/veeam/transport/veeamtransport-link --get-user
restricteduser ALL=(root) /opt/veeam/transport/veeamtransport --disable-restricted-mode
restricteduser ALL=(root) /opt/veeam/transport/veeamtransport-link --set-user root
restricteduser ALL=(root) /bin/ls /opt/veeam/transport/veeamtransport-link
restricteduser ALL=(root) /opt/veeam/transport/veeamtransport-link --set-user restricteduser
restricteduser ALL=(root) /opt/veeam/transport/veeamtransport --set-option BaseLogDirectory --set-option-value /var/log/VeeamBackup
restricteduser ALL=(root) /opt/veeam/transport/veeamtransport --set-option FirewallPortRange --set-option-value *
restricteduser ALL=(root) /opt/veeam/transport/veeamtransport --enable-restricted-mode
restricteduser ALL=(root) /opt/veeam/transport/veeamtransport --set-option MaxLogSize --set-option-value 10485760
restricteduser ALL=(root) /opt/veeam/transport/veeamtransport --set-option MaxLogCount --set-option-value 10
restricteduser ALL=(root) /opt/veeam/transport/veeamtransport --get-port
restricteduser ALL=(root) /opt/veeam/transport/veeamtransport --uninstall
restricteduser ALL=(root) /bin/rm -rf /opt/veeam/transport
 
#TAPE
restricteduser ALL=(root) /opt/veeam/tapeproxy/veeamtapeproxy --set-owner *
restricteduser ALL=(root) /opt/veeam/tapeproxy/veeamtapeproxy --uninstall
restricteduser ALL=(root) /bin/rm -rf /opt/veeam/tapeproxy
 
#Additions
restricteduser ALL=(root) /bin/test -d /tmp/
restricteduser ALL=(root) /bin/rm -f /tmp/Veeam*
restricteduser ALL=(root) /bin/touch /tmp/Veeam*
restricteduser ALL=(root) /bin/chmod 0700 /tmp/Veeam*
 
# Upload and unpack deployer
restricteduser ALL=(root) /usr/bin/chmod 0766 /opt/veeam/Upload/*                                                                                                                             
restricteduser ALL=(root) /usr/bin/mkdir --parents /opt/veeam/deployment
restricteduser ALL=(root) /usr/bin/mkdir --parents /opt/veeam/Upload/*
restricteduser ALL=(root) /usr/bin/touch /opt/veeam/Upload/*                                                                                                                                                
restricteduser ALL=(root) /bin/touch /tmp/VeeamDeploymentSvc*
restricteduser ALL=(root) /bin/tar xvzf /tmp/VeeamDeploymentSvc* -C /opt/veeam/deployment --no-same-owner
restricteduser ALL=(root) /bin/cp -f /home/restricteduser/* /tmp/VeeamDeploymentSvc*
restricteduser ALL=(root) /bin/chmod 0644 /tmp/VeeamDeploymentSvc*
restricteduser ALL=(root) /bin/cp -f /home/restricteduser/* /opt/veeam/Upload/*
restricteduser ALL=(root) /usr/bin/rm -f /tmp/VeeamDeploymentSvc*
restricteduser ALL=(root) /bin/rm -rf /opt/veeam/Upload/*
restricteduser ALL=(root) /bin/ls -d /opt/veeam/deployment
 
# Set rights
restricteduser ALL=(root) /bin/chown -hR root /opt/veeam/deployment
restricteduser ALL=(root) /bin/find /opt/veeam/deployment -type d
restricteduser ALL=(root) /bin/chmod 755 /opt/veeam/*                                                                                              
restricteduser ALL=(root) /bin/find /opt/veeam/deployment -type f -not -path /opt/veeam/deployment/veeamdeploymentsvc
restricteduser ALL=(root) /bin/chmod 644 /opt/veeam/deployment/*
restricteduser ALL=(root) /bin/chmod 744 /opt/veeam/deployment/veeamdeploymentsvc