new sudo line for dsa-nagios

Signed-off-by: Stephen Gran <steve@lobefin.net>

diff --git a/modules/sudo/files/common/sudoers b/modules/sudo/files/common/sudoers
index ebdfee8477b45859d098d91d19224185096ec27b..9fa227c6b6bf8d780cb726084b93f21ce9737461 100644 (file)
--- a/modules/sudo/files/common/sudoers
+++ b/modules/sudo/files/common/sudoers
@@ -118,6 +118,7 @@ pkg_user    powell=(archvsync)      NOPASSWD: /home/archvsync/bin/pushpdo
 # on draghi, the domains git thing will run bind9 reload afterwards
 %dnsadm                draghi,orff=(root)              NOPASSWD: /etc/init.d/bind9 reload
 %dnsadm                draghi,orff=(geodnssync)        NOPASSWD: /usr/bin/make -C /srv/dns.debian.org/geo
+%adm           draghi=(puppet)                 NOPASSWD: /usr/bin/make -C /srv/db.debian.org/var/gitnagios/dsa-nagios/config
 # remote power to babylon5 in the same rack:
 joerg          unger=(ALL)             /usr/bin/sispmctl -t [12], /usr/bin/sispmctl -g [12]
 # wbadm can update all buildd* users' keys on buildd.d.o