add new group dacshelper, allow access to www-data user on diabelli

[dsa-puppet.git] / modules / sudo / files / sudoers

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index edab31ec657440326a1bb24f30fb52ad2659c622..a1cc5802e047286660eb010f5b6f0dc0fddb2dd0 100644 (file)
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -83,6 +83,7 @@ nagios                beethoven,backuphost=(debbackup)        NOPASSWD: /usr/lib/nagios/plugins/dsa-c
 %debadmin      ALL=(dak)       ALL
 %debbugs       ALL=(debbugs)   ALL
 %debbugs       ALL=(debbugs-mirror)    ALL
+%debdelta      ALL=(debdelta)  ALL
 %debian-cd     ALL=(debian-cd) ALL
 %debian-i18n   ALL=(debian-i18n)       ALL
 %debian-release        ALL=(release)   ALL
@@ -117,6 +118,7 @@ nagios              beethoven,backuphost=(debbackup)        NOPASSWD: /usr/lib/nagios/plugins/dsa-c
 %wikiadm       ALL=(wiki,wikiweb)      ALL
 %qa-core       ALL=(qa,qa-web-rolex)   ALL
 %gobby         gombert=(gobby) ALL
+%dacshelper    diabelli=(www-data)     ALL
 
 # the dak user gets to run stuff as dak-unpriv (for things like lintian checks)
 %ftptrainee    FTPHOSTS=(dak-unpriv)   NOPASSWD: /usr/bin/lintian
@@ -131,8 +133,10 @@ Defaults:buildd env_reset,env_keep+="APT_CONFIG DEBIAN_FRONTEND"
 buildd         ALL=(ALL)               NOPASSWD: ALL
 
 %backports     franck,coccia=(staticsync)      NOPASSWD: /usr/local/bin/static-update-component backports.debian.org
+d-i            dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component d-i.debian.org
 dak            franck=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component ftp-master.metadata.debian.org
 %debbits       master=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component bits.debian.org
+%webwml                master=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component network-test.debian.org
 planet         philp,senfl=(staticsync)        NOPASSWD: /usr/local/bin/static-update-component planet.debian.org
 debwww         wolkenstein=(staticsync)        NOPASSWD: /usr/local/bin/static-update-component www.debian.org