X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=modules%2Fsudo%2Ffiles%2Fsudoers;h=a5eaa2e7663492181fd7a03a60382c80791bda1b;hb=3a9af9163cb5c8ba3253f498c56bf656cbaf1517;hp=0fe65f68e893b6de0209448a060bab7eee58369c;hpb=7dc7ea61513914af2978fadc25af7941ef3c3104;p=dsa-puppet.git diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers index 0fe65f68..a5eaa2e7 100644 --- a/modules/sudo/files/sudoers +++ b/modules/sudo/files/sudoers @@ -29,7 +29,6 @@ Host_Alias FTPHOSTS = franck Host_Alias ZIVITHOSTS = zelenka, zandonai Host_Alias AACRAIDHOSTS = beethoven, pettersson Host_Alias MEGARAIDHOSTS = rautavaara, sibelius -Host_Alias MPTRAIDHOSTS = barber, biber, vitry Host_Alias MEGACTLHOSTS = nielsen Host_Alias LISTHOSTS = bendel Host_Alias BUILDD_MASTER = wuiet @@ -72,7 +71,6 @@ nagios franck=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=1 enclosure 1E # other raid controllers nagios powell=(ALL) NOPASSWD: /usr/local/bin/tw_cli info c0 u0 status -nagios MPTRAIDHOSTS=(ALL) NOPASSWD: /usr/sbin/mpt-status -s nagios AACRAIDHOSTS=(ALL) NOPASSWD: /usr/local/bin/arcconf GETCONFIG 1 LD, /usr/local/bin/arcconf GETCONFIG 1 AD nagios MEGARAIDHOSTS=(ALL) NOPASSWD: /usr/local/bin/megarc -AllAdpInfo -nolog, /usr/local/bin/megarc -dispCfg -a0 -nolog nagios MEGACTLHOSTS=(ALL) NOPASSWD: /usr/sbin/megactl -Hv @@ -83,6 +81,7 @@ nagios beethoven,backuphost=(debbackup) NOPASSWD: /usr/lib/nagios/plugins/dsa-c %auditor ALL=(accounting) ALL %backports ALL=(backports) ALL %blends ALL=(blends) ALL +%btslink ALL=(btslink) ALL %buildd ALL=(buildd) ALL %codesearch ALL=(codesearch) ALL %d-i ALL=(d-i) ALL @@ -98,9 +97,11 @@ nagios beethoven,backuphost=(debbackup) NOPASSWD: /usr/lib/nagios/plugins/dsa-c %debtags ALL=(debtags) ALL %debwww ALL=(debwww) ALL %dedup ALL=(dedup) ALL -%btslink ALL=(btslink) ALL +%dgit ALL=(dgit) ALL %emdebian ALL=(emdebian) ALL %forums ALL=(forums) ALL +%httpredir ALL=(httpredir) ALL +%httpredir ALL=(httpredir-app) ALL %keyring ALL=(keyring) ALL %lintian ALL=(lintian) ALL %listweb ALL=(listweb) ALL @@ -140,6 +141,9 @@ dak ALL=(dak-unpriv) NOPASSWD: ALL # and ftpmaster can access the role user for their web services %debadmin FTPHOSTS=(dak-web) ALL +# the httpredir role use can run things as httpredir-app +httpredir ALL=(httpredir-app) NOPASSWD: ALL + # some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost %apachectrl ALL=(root) /usr/sbin/apache2-vhost-update @@ -150,7 +154,9 @@ buildd ALL=(ALL) NOPASSWD: ALL %backports franck,coccia=(staticsync) NOPASSWD: /usr/local/bin/static-update-component backports.debian.org d-i dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component d-i.debian.org +lucas dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component debaday.debian.net dsa dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component dsa.debian.org +dak franck=(staticsync) NOPASSWD: /usr/local/bin/static-update-component incoming.debian.org dak franck=(staticsync) NOPASSWD: /usr/local/bin/static-update-component metadata.ftp-master.debian.org %debbits master=(staticsync) NOPASSWD: /usr/local/bin/static-update-component bits.debian.org %webwml master=(staticsync) NOPASSWD: /usr/local/bin/static-update-component network-test.debian.org