Enable httredir to run everything as httpredir-app

[dsa-puppet.git] / modules / sudo / files / sudoers

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index 42232bb4384e7be770c7dbf469422606fe5daf70..3e5e249af552fb0b597eb3ceaf1682aaa09b80e4 100644 (file)
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -100,6 +100,8 @@ nagios              beethoven,backuphost=(debbackup)        NOPASSWD: /usr/lib/nagios/plugins/dsa-c
 %dgit          ALL=(dgit)      ALL
 %emdebian      ALL=(emdebian)  ALL
 %forums                ALL=(forums)    ALL
+%httpredir     ALL=(httpredir) ALL
+%httpredir     ALL=(httpredir-app)     ALL
 %keyring       ALL=(keyring)   ALL
 %lintian       ALL=(lintian)   ALL
 %listweb       ALL=(listweb)   ALL
@@ -139,6 +141,9 @@ dak         ALL=(dak-unpriv)        NOPASSWD: ALL
 # and ftpmaster can access the role user for their web services
 %debadmin      FTPHOSTS=(dak-web)      ALL
 
+# the httpredir role use can run things as httpredir-app
+httpredir      ALL=(httpredir-app)     NOPASSWD: ALL
+
 # some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost
 %apachectrl    ALL=(root)      /usr/sbin/apache2-vhost-update