Enable httredir to run everything as httpredir-app

[dsa-puppet.git] / modules / sudo / files / sudoers

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index 4a9ca88bdca384ae23d3ceb81879377393cc695d..3e5e249af552fb0b597eb3ceaf1682aaa09b80e4 100644 (file)
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -81,6 +81,7 @@ nagios                beethoven,backuphost=(debbackup)        NOPASSWD: /usr/lib/nagios/plugins/dsa-c
 %auditor       ALL=(accounting)        ALL
 %backports     ALL=(backports) ALL
 %blends                ALL=(blends)    ALL
+%btslink       ALL=(btslink)   ALL
 %buildd                ALL=(buildd)    ALL
 %codesearch    ALL=(codesearch)        ALL
 %d-i           ALL=(d-i)       ALL
@@ -96,9 +97,11 @@ nagios               beethoven,backuphost=(debbackup)        NOPASSWD: /usr/lib/nagios/plugins/dsa-c
 %debtags       ALL=(debtags)   ALL
 %debwww                ALL=(debwww)    ALL
 %dedup         ALL=(dedup)     ALL
-%btslink       ALL=(btslink)   ALL
+%dgit          ALL=(dgit)      ALL
 %emdebian      ALL=(emdebian)  ALL
 %forums                ALL=(forums)    ALL
+%httpredir     ALL=(httpredir) ALL
+%httpredir     ALL=(httpredir-app)     ALL
 %keyring       ALL=(keyring)   ALL
 %lintian       ALL=(lintian)   ALL
 %listweb       ALL=(listweb)   ALL
@@ -138,6 +141,9 @@ dak         ALL=(dak-unpriv)        NOPASSWD: ALL
 # and ftpmaster can access the role user for their web services
 %debadmin      FTPHOSTS=(dak-web)      ALL
 
+# the httpredir role use can run things as httpredir-app
+httpredir      ALL=(httpredir-app)     NOPASSWD: ALL
+
 # some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost
 %apachectrl    ALL=(root)      /usr/sbin/apache2-vhost-update