Add lindsay

[dsa-puppet.git] / modules / sudo / files / sudoers

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index 42232bb4384e7be770c7dbf469422606fe5daf70..780eb11bfb2fe8614d2a84e28119341ef89f1523 100644 (file)
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -32,7 +32,7 @@ Host_Alias    MEGARAIDHOSTS   = rautavaara, sibelius
 Host_Alias     MEGACTLHOSTS    = nielsen
 Host_Alias     LISTHOSTS       = bendel
 Host_Alias     BUILDD_MASTER   = wuiet
-Host_Alias     PORTERBOXES     = abel, barriere, eder, falla, fischer, gabrielli, harris, merulo, partch, smetana, zelenka
+Host_Alias     PORTERBOXES     = abel, asachi, barriere, eder, falla, fischer, gabrielli, harris, merulo, partch, smetana, zelenka
 Host_Alias     PIUPARTS_SLAVE_HOSTS    = piu-slave-bm-a
 Host_Alias     MQ_HOSTS        = rainier, rapoport
 Host_Alias     NOVAHOSTS       = oyens, bm-bl9, bm-bl10, bm-bl11, bm-bl12
@@ -75,7 +75,7 @@ nagios                AACRAIDHOSTS=(ALL)      NOPASSWD: /usr/local/bin/arcconf GETCONFIG 1 LD, /usr
 nagios         MEGARAIDHOSTS=(ALL)     NOPASSWD: /usr/local/bin/megarc -AllAdpInfo -nolog, /usr/local/bin/megarc -dispCfg -a0 -nolog
 nagios         MEGACTLHOSTS=(ALL)      NOPASSWD: /usr/sbin/megactl -Hv
 # other nagios things
-nagios         beethoven,backuphost=(debbackup)        NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg ""
+nagios         backuphost,storace=(debbackup)  NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg ""
 
 # groups and their role accounts
 %auditor       ALL=(accounting)        ALL
@@ -100,6 +100,8 @@ nagios              beethoven,backuphost=(debbackup)        NOPASSWD: /usr/lib/nagios/plugins/dsa-c
 %dgit          ALL=(dgit)      ALL
 %emdebian      ALL=(emdebian)  ALL
 %forums                ALL=(forums)    ALL
+%httpredir     ALL=(httpredir) ALL
+%httpredir     ALL=(httpredir-app)     ALL
 %keyring       ALL=(keyring)   ALL
 %lintian       ALL=(lintian)   ALL
 %listweb       ALL=(listweb)   ALL
@@ -139,6 +141,9 @@ dak         ALL=(dak-unpriv)        NOPASSWD: ALL
 # and ftpmaster can access the role user for their web services
 %debadmin      FTPHOSTS=(dak-web)      ALL
 
+# the httpredir role use can run things as httpredir-app
+httpredir      ALL=(httpredir-app)     NOPASSWD: ALL
+
 # some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost
 %apachectrl    ALL=(root)      /usr/sbin/apache2-vhost-update
 
@@ -149,6 +154,7 @@ buildd              ALL=(ALL)               NOPASSWD: ALL
 
 %backports     franck,coccia=(staticsync)      NOPASSWD: /usr/local/bin/static-update-component backports.debian.org
 d-i            dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component d-i.debian.org
+lucas          dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component debaday.debian.net
 dsa            dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component dsa.debian.org
 dak            franck=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component incoming.debian.org
 dak            franck=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component metadata.ftp-master.debian.org
@@ -163,6 +169,7 @@ debwww              wolkenstein=(staticsync)        NOPASSWD: /usr/local/bin/static-update-componen
 %debvoip       dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component rtc.debian.org
 %security      dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component security-team.debian.org
 %lintian       lilburn=(staticsync)            NOPASSWD: /usr/local/bin/static-update-component lintian.debian.org
+%lintian       lindsay=(staticsync)            NOPASSWD: /usr/local/bin/static-update-component lintian.debian.org
 
 # The piuparts slave needs to handle chroots
 piupartss      PIUPARTS_SLAVE_HOSTS=(ALL)              NOPASSWD: ALL
@@ -178,8 +185,8 @@ dnsadm              denis=(root)                    NOPASSWD: /usr/sbin/service bind9 reload
 dak            FTPHOSTS,SECHOSTS=(archvsync)   NOPASSWD:/home/archvsync/runmirrors
 dak            franck=(backports)      NOPASSWD: /home/backports/bin/update-archive
 # archvsync triggers snapshot
-archvsync      sibelius,stabile=(snapshot)     NOPASSWD: /srv/snapshot.debian.org/bin/update-trigger
-archvsync      sibelius,stabile=(snapshot)     NOPASSWD: /srv/2ndsnapshot/bin/update-trigger
+archvsync      sibelius=(snapshot)     NOPASSWD: /srv/snapshot.debian.org/bin/update-trigger
+archvsync      sibelius=(snapshot)     NOPASSWD: /srv/2ndsnapshot/bin/update-trigger
 # dak stuff
 %debian-release        FTPHOSTS=(dak)          /usr/local/bin/dak transitions --import *
 %ftpteam       FTPHOSTS=(dak)          /usr/local/bin/dak transitions --import *
@@ -191,6 +198,7 @@ dak         SECHOSTS=(archvsync)    NOPASSWD: /home/archvsync/signal_security
 # web stuff
 debwww         WEBHOSTS=(archvsync)    NOPASSWD: /home/archvsync/webmirrors/runmirrors
 %press         WEBHOSTS=(debwww)       /srv/www.debian.org/update-part News
+%debvote       WEBHOSTS=(debwww)       /srv/www.debian.org/update-part vote
 # more list stuff
 %list          LISTHOSTS=(root)                /usr/sbin/postfix reload
 %list          stockhausen=(root)              /usr/sbin/service jetty restart