Cmnd_Alias VDSM_LIFECYCLE = /usr/sbin/tunctl, /usr/sbin/brctl, /sbin/ip, /sbin/ethtool, /usr/share/vdsm/addNetwork, /usr/share/vdsm/delNetwork, /usr/share/vdsm/editNetwork, /usr/share/vdsm/vdsm-store-net-config, /usr/sbin/dmidecode, /usr/share/vdsm/mk_sysprep_floppy, \
    /sbin/service ksmtuned *, \
    /sbin/service ksm *, \
    /usr/share/vdsm/prepare-vmchannel, \
    /usr/share/vdsm/get-vm-pid
Cmnd_Alias VDSM_STORAGE = /bin/mount, /bin/umount, \
    /sbin/e2fsck -p *, \
    /sbin/tune2fs -j *, \
    /sbin/mke2fs -q -j *, \
    /sbin/fuser -m *, \
    /bin/kill, \
    /bin/chown vdsm\:qemu *, \
    /bin/chown vdsm\:kvm *, \
    /bin/mv /etc/iscsi/iscsid.conf /etc/iscsi/iscsid.conf.*, \
    /bin/mv /etc/multipath.conf *, \
    /bin/cp * /etc/iscsi/iscsid.conf, \
    /bin/cp * /etc/multipath.conf, \
    /sbin/service iscsid *, \
    /sbin/service multipathd restart, \
    /sbin/service multipathd reload, \
    /sbin/scsi_id, \
    /sbin/iscsiadm *, \
    /sbin/lvm, \
    /bin/cat /sys/block/*/device/../../*, \
    /bin/cat /sys/devices/platform/host*, \
    /bin/cat /etc/iscsi/iscsid.conf, \
    /bin/cat /etc/multipath.conf, \
    /bin/dd of=/sys/class/scsi_host/host*/scan, \
    /bin/dd, \
    /usr/sbin/persist multipath.conf, \
    /usr/sbin/persist /var/log/vdsm/backup/*, \
    /usr/sbin/unpersist multipath.conf, \
    /usr/sbin/unpersist /var/log/vdsm/backup/*, \
    /bin/cp * multipath.conf *, \
    /bin/cp * /var/log/vdsm/backup/* *, \
    /sbin/dmsetup ls --target multipath, \
    /sbin/dmsetup ls, \
    /sbin/dmsetup remove *, \
    /sbin/multipath, \
    /sbin/blockdev --getsize64 *, \
    /usr/bin/setsid /usr/bin/ionice -c? -n? /bin/su vdsm -s /bin/sh -c /usr/libexec/vdsm/spmprotect.sh*, \
    /usr/bin/ionice -c? -n? /bin/su vdsm -s /bin/sh -c /bin/dd\ *, \
    /sbin/service vdsmd *, \
    /sbin/reboot -f, \
    /usr/bin/python /usr/share/vdsm/supervdsmServer.pyc [a-z0-9\\-]* [0-9]*

vdsm  ALL=(ALL) NOPASSWD: VDSM_LIFECYCLE, VDSM_STORAGE
Defaults:vdsm !requiretty
Defaults:vdsm !syslog
