%secretary ALL=(secretary) ALL
%sectracker ALL=(sectracker) ALL
%security SECHOSTS=(mail_security) ALL
+%security ALL=(security) ALL
%snapshot ALL=(snapshot) ALL
%uddadm ALL=(udd) ALL
%volatile ALL=(volatile) ALL
%qa-core ALL=(qa) ALL
%gobby gombert=(gobby) ALL
%dacshelper diabelli=(www-data) ALL
+%debsso diabelli=(debsso) ALL
# the dak user gets to run stuff as dak-unpriv (for things like lintian checks)
%ftptrainee FTPHOSTS=(dak-unpriv) NOPASSWD: /usr/bin/lintian