X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=modules%2Fsudo%2Ffiles%2Fsudoers;h=0fe65f68e893b6de0209448a060bab7eee58369c;hb=7dc7ea61513914af2978fadc25af7941ef3c3104;hp=a9faf868d27b1ea2b930c8fe6dfd508ac527cc40;hpb=37894e791d8d03333255b563d38f42dfbd121eee;p=dsa-puppet.git diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers index a9faf868..0fe65f68 100644 --- a/modules/sudo/files/sudoers +++ b/modules/sudo/files/sudoers @@ -27,15 +27,16 @@ Host_Alias WEBHOSTS = wolkenstein Host_Alias SECHOSTS = chopin Host_Alias FTPHOSTS = franck Host_Alias ZIVITHOSTS = zelenka, zandonai -Host_Alias AACRAIDHOSTS = respighi, beethoven, pettersson +Host_Alias AACRAIDHOSTS = beethoven, pettersson Host_Alias MEGARAIDHOSTS = rautavaara, sibelius -Host_Alias MPTRAIDHOSTS = barber, biber, cilea, vitry, orff +Host_Alias MPTRAIDHOSTS = barber, biber, vitry Host_Alias MEGACTLHOSTS = nielsen Host_Alias LISTHOSTS = bendel Host_Alias BUILDD_MASTER = wuiet Host_Alias PORTERBOXES = abel, barriere, eder, falla, fischer, gabrielli, harris, merulo, partch, smetana, zelenka Host_Alias PIUPARTS_SLAVE_HOSTS = piu-slave-bm-a Host_Alias MQ_HOSTS = rainier, rapoport +Host_Alias NOVAHOSTS = oyens, bm-bl9, bm-bl10, bm-bl11, bm-bl12 # Cmnd alias specification @@ -95,7 +96,6 @@ nagios beethoven,backuphost=(debbackup) NOPASSWD: /usr/lib/nagios/plugins/dsa-c %debian-i18n ALL=(debian-i18n) ALL %debian-release ALL=(release) ALL %debtags ALL=(debtags) ALL -%debvoip cilea=(freeswitch) ALL %debwww ALL=(debwww) ALL %dedup ALL=(dedup) ALL %btslink ALL=(btslink) ALL @@ -126,6 +126,7 @@ nagios beethoven,backuphost=(debbackup) NOPASSWD: /usr/lib/nagios/plugins/dsa-c %uddadm ALL=(udd) ALL %volatile ALL=(volatile) ALL %wbadm ALL=(wbadm) ALL +%wbadm-ports ALL=(wbadm-ports) ALL %mujeres ALL=(women) ALL %wikiadm ALL=(wiki,wikiweb) ALL %qa-core ALL=(qa) ALL @@ -153,7 +154,7 @@ dsa dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component dsa.d dak franck=(staticsync) NOPASSWD: /usr/local/bin/static-update-component metadata.ftp-master.debian.org %debbits master=(staticsync) NOPASSWD: /usr/local/bin/static-update-component bits.debian.org %webwml master=(staticsync) NOPASSWD: /usr/local/bin/static-update-component network-test.debian.org -planet philp,senfl=(staticsync) NOPASSWD: /usr/local/bin/static-update-component planet.debian.org +planet philp=(staticsync) NOPASSWD: /usr/local/bin/static-update-component planet.debian.org debwww wolkenstein=(staticsync) NOPASSWD: /usr/local/bin/static-update-component www.debian.org %blends dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component blends.debian.org %Debian dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component wnpp-by-tags.debian.net @@ -161,14 +162,13 @@ debwww wolkenstein=(staticsync) NOPASSWD: /usr/local/bin/static-update-componen %ports dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component www.ports.debian.org %debvoip dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component rtc.debian.org %security dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component security-team.debian.org +%lintian lilburn=(staticsync) NOPASSWD: /usr/local/bin/static-update-component lintian.debian.org # The piuparts slave needs to handle chroots piupartss PIUPARTS_SLAVE_HOSTS=(ALL) NOPASSWD: ALL # trigger of mirror run for packages #pkg_user powell=(archvsync) NOPASSWD: /home/archvsync/bin/pushpdo dnsadm denis=(root) NOPASSWD: /usr/sbin/service bind9 reload -%dnsadm orff=(root) NOPASSWD: /etc/init.d/bind9 reload -%dnsadm orff=(geodnssync) NOPASSWD: /usr/bin/make -C /srv/dns.debian.org/geo %adm draghi=(puppet) NOPASSWD: /usr/bin/make -s -C /srv/db.debian.org/var/gitnagios/dsa-nagios/config install # wbadm can update all buildd* users' keys on buildd.d.o %wbadm BUILDD_MASTER=(wb-buildd) ALL @@ -177,7 +177,6 @@ dnsadm denis=(root) NOPASSWD: /usr/sbin/service bind9 reload # mirror push dak FTPHOSTS,SECHOSTS=(archvsync) NOPASSWD:/home/archvsync/runmirrors dak franck=(backports) NOPASSWD: /home/backports/bin/update-archive -planet senfl=(archvsync) NOPASSWD: /home/archvsync/bin/runplanet "" # archvsync triggers snapshot archvsync sibelius,stabile=(snapshot) NOPASSWD: /srv/snapshot.debian.org/bin/update-trigger archvsync sibelius,stabile=(snapshot) NOPASSWD: /srv/2ndsnapshot/bin/update-trigger @@ -214,3 +213,4 @@ nagiosadm tchaikovsky=(root) NOPASSWD: /usr/sbin/service icinga reload Defaults:neutron !requiretty nova NOVAHOSTS=(root) NOPASSWD: /usr/bin/nova-rootwrap * neutron NOVAHOSTS=(root) NOPASSWD: /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf * +cinder NOVAHOSTS=(root) NOPASSWD: /usr/bin/cinder-rootwrap /etc/cinder/rootwrap.conf *