From: Peter Palfrader Date: Sun, 21 Sep 2014 17:06:33 +0000 (+0200) Subject: Allow httpredir role to run some things as httpredir-app X-Git-Url: https://git.donarmstrong.com/?p=dsa-puppet.git;a=commitdiff_plain;h=a6cf207d3c72d272029fc7a19300e0a9f444b525 Allow httpredir role to run some things as httpredir-app --- diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers index 2bfc1378..c274626e 100644 --- a/modules/sudo/files/sudoers +++ b/modules/sudo/files/sudoers @@ -101,7 +101,7 @@ nagios beethoven,backuphost=(debbackup) NOPASSWD: /usr/lib/nagios/plugins/dsa-c %emdebian ALL=(emdebian) ALL %forums ALL=(forums) ALL %httpredir ALL=(httpredir) ALL -%httpredir ALL=(httpredir-all) ALL +%httpredir ALL=(httpredir-app) ALL %keyring ALL=(keyring) ALL %lintian ALL=(lintian) ALL %listweb ALL=(listweb) ALL @@ -141,6 +141,9 @@ dak ALL=(dak-unpriv) NOPASSWD: ALL # and ftpmaster can access the role user for their web services %debadmin FTPHOSTS=(dak-web) ALL +# the httpredir role use can run a couple of things as httpredir-app +httpredir ALL=(httpredir-app) NOPASSWD: /usr/bin/starman + # some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost %apachectrl ALL=(root) /usr/sbin/apache2-vhost-update