X-Git-Url: https://git.donarmstrong.com/?p=dsa-puppet.git;a=blobdiff_plain;f=modules%2Fsudo%2Ffiles%2Fsudoers;h=f5471713d7a9da225b724e6b8ba9a99767b36b29;hp=54f3070e4c4e8bd9014b87dc0bef2b8977b504a4;hb=3f40e467237248b89d0c16ba55edde02d3e168c4;hpb=89d65a24f2241b205980e31340e8bc610fe92a39

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index 54f3070e..f5471713 100644
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -33,7 +33,7 @@ Host_Alias	MEGACTLHOSTS	= nielsen
 Host_Alias	LISTHOSTS	= bendel
 Host_Alias	BUILDD_MASTER	= wuiet
 Host_Alias	BUILDD_PORTS_MASTER	= portman
-Host_Alias	PORTERBOXES	= abel, asachi, barriere, eder, falla, fischer, gabrielli, harris, merulo, minkus, partch, plummer, pizzetti, smetana, zelenka
+Host_Alias	PORTERBOXES	= abel, asachi, barriere, eder, etler, falla, fischer, harris, merulo, minkus, partch, plummer, pizzetti, smetana, zelenka
 Host_Alias	PIUPARTS_SLAVE_HOSTS	= piu-slave-bm-a
 Host_Alias	MQ_HOSTS	= rainier, rapoport
 Host_Alias	NOVAHOSTS	= oyens, bm-bl9, bm-bl10, bm-bl11, bm-bl12
@@ -81,6 +81,7 @@ nagios		AACRAIDHOSTS=(ALL)	NOPASSWD: /usr/local/bin/arcconf GETCONFIG 1 LD, /usr
 nagios		MEGARAIDHOSTS=(ALL)	NOPASSWD: /usr/local/bin/megarc -AllAdpInfo -nolog, /usr/local/bin/megarc -dispCfg -a0 -nolog
 nagios		MEGACTLHOSTS=(ALL)	NOPASSWD: /usr/sbin/megactl -Hv
 # other nagios things
+nagios		backuphost=(debbackup)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg ""
 nagios		storace=(debbackup)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg ""
 
 # groups and their role accounts
@@ -108,9 +109,11 @@ nagios		storace=(debbackup)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg
 %dgit		ALL=(dgit-unpriv)	ALL
 %emdebian	ALL=(emdebian)	ALL
 %forums		ALL=(forums)	ALL
+%gitdoadm	ALL=(gitdoadm)	ALL
 %httpredir	ALL=(httpredir)	ALL
 %httpredir	ALL=(httpredir-app)	ALL
 %keyring	ALL=(keyring)	ALL
+%jenkins-adm	ALL=(jenkins-adm)	ALL
 %lintian	ALL=(lintian)	ALL
 %listweb	ALL=(listweb)	ALL
 %list		LISTHOSTS=(list)	ALL
@@ -133,6 +136,7 @@ nagios		storace=(debbackup)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg
 %security	ALL=(security)	ALL
 %snapshot	ALL=(snapshot)	ALL
 %uddadm		ALL=(udd)	ALL
+%videoteam	vittoria=(veyepar)	ALL
 %volatile	ALL=(volatile)	ALL
 %wbadm		ALL=(wbadm)	ALL
 %wbadm-ports	ALL=(wbadm-ports)	ALL
@@ -142,6 +146,7 @@ nagios		storace=(debbackup)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg
 %gobby		gombert=(gobby)	ALL
 %dacshelper	diabelli=(www-data)	ALL
 %debsso		diabelli=(debsso)	ALL
+%debsso-web	diabelli=(debsso-web)	ALL
 
 # the dak user gets to run stuff as dak-unpriv (for things like lintian checks)
 %ftptrainee	FTPHOSTS=(dak-unpriv)	NOPASSWD: /usr/bin/lintian
@@ -167,7 +172,7 @@ lucas		dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component deb
 dsa		dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component dsa.debian.org
 dak		franck=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component incoming.debian.org
 dak		franck=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component metadata.ftp-master.debian.org
-%debbits	master=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component bits.debian.org
+%publicity	master=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component bits.debian.org
 %debdelta	donizetti=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component debdeltas.debian.net
 %webwml		master=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component network-test.debian.org
 planet		philp=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component planet.debian.org
@@ -179,6 +184,7 @@ debwww		wolkenstein=(staticsync)	NOPASSWD: /usr/local/bin/static-update-componen
 %debvoip	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component rtc.debian.org
 %security	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component security-team.debian.org
 %publicity	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component timeline.debian.net
+pabs		dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component timeline.debian.net
 %lintian	lindsay=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component lintian.debian.org
 
 # The piuparts slave needs to handle chroots
@@ -209,7 +215,7 @@ archvsync	sibelius=(snapshot)	NOPASSWD: /srv/2ndsnapshot/bin/update-trigger
 dak		SECHOSTS=(archvsync)	NOPASSWD: /home/archvsync/signal_security
 # web stuff
 debwww		WEBHOSTS=(archvsync)	NOPASSWD: /home/archvsync/webmirrors/runmirrors
-%press		WEBHOSTS=(debwww)	/srv/www.debian.org/update-part News
+%publicity	WEBHOSTS=(debwww)	/srv/www.debian.org/update-part News
 %debvote	WEBHOSTS=(debwww)	/srv/www.debian.org/update-part vote
 # more list stuff
 %list		LISTHOSTS=(root)		/usr/sbin/postfix reload
@@ -228,6 +234,7 @@ nagiosadm	tchaikovsky=(root)		NOPASSWD: /usr/sbin/service icinga reload
 
 # voip stuff
 %debvoip	VOIPHOSTS=(root)	/usr/sbin/service resiprocate-turn-server restart, /usr/sbin/service repro restart
+%debvoip	VOIPHOSTS=(root)	/usr/sbin/service prosody restart, /usr/sbin/service prosody reload, /usr/sbin/service prosody stop, /usr/sbin/service prosody start
 
 # Openstack stuff
 Defaults:neutron !requiretty