]> git.donarmstrong.com Git - dsa-puppet.git/commitdiff
give debadmin access to the new dak-web user
authorPeter Palfrader <peter@palfrader.org>
Wed, 25 Dec 2013 12:12:09 +0000 (13:12 +0100)
committerPeter Palfrader <peter@palfrader.org>
Wed, 25 Dec 2013 12:12:09 +0000 (13:12 +0100)
modules/sudo/files/sudoers

index 27fbfc32f8b8d6e6caa03b0d63c704e47924cb47..1676b00396e644a4afd26d41112f22cd15448653 100644 (file)
@@ -128,6 +128,8 @@ nagios              beethoven,backuphost=(debbackup)        NOPASSWD: /usr/lib/nagios/plugins/dsa-c
 # the dak user gets to run stuff as dak-unpriv (for things like lintian checks)
 %ftptrainee    FTPHOSTS=(dak-unpriv)   NOPASSWD: /usr/bin/lintian
 dak            ALL=(dak-unpriv)        NOPASSWD: ALL
+# and ftpmaster can access the role user for their web services
+%debadmin      FTPHOSTS=(dak-web)      ALL
 
 # some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost
 %apachectrl    ALL=(root)      /usr/sbin/apache2-vhost-update