From 46a3ce0a4d68c0354e801610c36a950c3e798f89 Mon Sep 17 00:00:00 2001 From: Ansgar Burchardt Date: Sun, 26 May 2013 22:17:19 +0200 Subject: [PATCH] sudoers: ordering for dak-unpriv user The dak user is allowed to run any command as dak-unpriv however it cannot pass environment variables to lintian as the last entry matched counts. Signed-off-by: Peter Palfrader --- modules/sudo/files/sudoers | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers index 51e3a0c0..196bb4a8 100644 --- a/modules/sudo/files/sudoers +++ b/modules/sudo/files/sudoers @@ -118,8 +118,8 @@ nagios beethoven=(debbackup) NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backup %gobby gombert=(gobby) ALL # the dak user gets to run stuff as dak-unpriv (for things like lintian checks) -dak ALL=(dak-unpriv) NOPASSWD: ALL %ftptrainee FTPHOSTS=(dak-unpriv) NOPASSWD: /usr/bin/lintian +dak ALL=(dak-unpriv) NOPASSWD: ALL # some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost %apachectrl ALL=(root) /usr/sbin/apache2-vhost-update -- 2.39.2