Fix commands allowed by sudoers to include update-java-alternatives
Change-Id: Iaf8f000c65144172797f8c13757b957268f2856d
diff --git a/packer/provision/baseline.sh b/packer/provision/baseline.sh
index cf0f3c6..4495165 100644
--- a/packer/provision/baseline.sh
+++ b/packer/provision/baseline.sh
@@ -186,8 +186,9 @@
# Allow jenkins access to update-alternatives command to switch java version
cat <<EOF >/etc/sudoers.d/89-jenkins-user-defaults
+Cmnd_Alias CMDS = /usr/sbin/update-alternatives, /usr/sbin/update-java-alternatives
Defaults:jenkins !requiretty
-jenkins ALL = NOPASSWD: /usr/bin/update-alternatives
+jenkins ALL = NOPASSWD: CMDS
EOF
export DEBIAN_FRONTEND=noninteractive