From: Peter Palfrader <peter@palfrader.org>
Date: Sat, 19 Jan 2013 14:12:00 +0000 (+0100)
Subject: Give the ftp folks access to run lintian as dak-unpriv
X-Git-Url: https://git.donarmstrong.com/?a=commitdiff_plain;h=5e29511b1fd561dfe57405b08df50976101ecc7c;p=dsa-puppet.git

Give the ftp folks access to run lintian as dak-unpriv
---

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index 33f1ba63..1432afe6 100644
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -117,6 +117,7 @@ nagios		beethoven=(debbackup)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backup
 
 # the dak user gets to run stuff as dak-unpriv (for things like lintian checks)
 dak		ALL=(dak-unpriv)	NOPASSWD: ALL
+%ftptrainee	FTPHOSTS=(dak-unpriv)	NOPASSWD: /usr/bin/lintian
 
 # some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost
 %apachectrl	ALL=(root)	/usr/sbin/apache2-vhost-update