From a6cf207d3c72d272029fc7a19300e0a9f444b525 Mon Sep 17 00:00:00 2001 From: Peter Palfrader Date: Sun, 21 Sep 2014 19:06:33 +0200 Subject: [PATCH] Allow httpredir role to run some things as httpredir-app --- modules/sudo/files/sudoers | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers index 2bfc1378..c274626e 100644 --- a/modules/sudo/files/sudoers +++ b/modules/sudo/files/sudoers @@ -101,7 +101,7 @@ nagios beethoven,backuphost=(debbackup) NOPASSWD: /usr/lib/nagios/plugins/dsa-c %emdebian ALL=(emdebian) ALL %forums ALL=(forums) ALL %httpredir ALL=(httpredir) ALL -%httpredir ALL=(httpredir-all) ALL +%httpredir ALL=(httpredir-app) ALL %keyring ALL=(keyring) ALL %lintian ALL=(lintian) ALL %listweb ALL=(listweb) ALL @@ -141,6 +141,9 @@ dak ALL=(dak-unpriv) NOPASSWD: ALL # and ftpmaster can access the role user for their web services %debadmin FTPHOSTS=(dak-web) ALL +# the httpredir role use can run a couple of things as httpredir-app +httpredir ALL=(httpredir-app) NOPASSWD: /usr/bin/starman + # some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost %apachectrl ALL=(root) /usr/sbin/apache2-vhost-update -- 2.39.2