allow nagios to check puppet's ca cert

[dsa-puppet.git] / modules / sudo / files / sudoers

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index c52d901f4d3cf95afad7e48edba5a7cfb574f69d..c36c0c3c972c326e9e9d6b2663aec590e15359d9 100644 (file)
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -59,6 +59,7 @@ nagios                ALL=(ALL)       NOPASSWD: /usr/lib/nagios/plugins/dsa-check-filesystems ""
 nagios         ALL=(ALL)       NOPASSWD: /usr/lib/nagios/plugins/dsa-check-libs ""
 nagios         ALL=(ALL)       NOPASSWD: /usr/lib/nagios/plugins/dsa-check-stunnel-sanity ""
 nagios         ALL=(ALL)       NOPASSWD: /usr/local/sbin/dsa-check-libs ""
+nagios         handel=(ALL)    NOPASSWD: /usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem
 # with smartarray controllers
 nagios         ALL=(ALL)       NOPASSWD: /sbin/hpasmcli ""
 nagios         ALL=(ALL)       NOPASSWD: /usr/bin/arrayprobe ""
@@ -158,6 +159,7 @@ httpredir   ALL=(httpredir-app)     NOPASSWD: ALL
 Defaults:buildd env_reset,env_keep+="APT_CONFIG DEBIAN_FRONTEND"
 buildd         ALL=(ALL)               NOPASSWD: ALL
 
+%appstream     mekeel=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component appstream.debian.org
 %backports     franck,coccia=(staticsync)      NOPASSWD: /usr/local/bin/static-update-component backports.debian.org
 d-i            dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component d-i.debian.org
 lucas          dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component debaday.debian.net