##
## THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
## USE: git clone git+ssh://$USER@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet.git
##

# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the man page for details on how to write a sudoers file.
#

# Host alias specification

# User alias specification

# Cmnd alias specification

# User privilege specification
root	ALL=(ALL) ALL

# DSA
%adm	ALL=(ALL) ALL
%adm    ALL=(ALL) NOPASSWD: /usr/bin/apt-get update, /usr/bin/apt-get dist-upgrade, /usr/bin/apt-get clean, /usr/sbin/samhain -t check -i -p err -s none -l none -m none

# HP local admin group
%hpadmins	ALL=(ALL) ALL

%debbugs	ALL=(debbugs) ALL
%nm		ALL=(nm) ALL
%dde		ALL=(dde) ALL
%debadmin	ALL=(katie) NOPASSWD: ALL
%debadmin	ALL=(dak) ALL
%debadmin	ALL=(archvsync) NOPASSWD: ALL

%apachectrl	ALL=(root) /usr/sbin/apache2-vhost-update

# QA
weasel    ALL=(qa) ALL
aba       ALL=(qa) ALL
jeroen    ALL=(qa) ALL
myon      ALL=(qa) ALL
hertzog   ALL=(qa) ALL
lucas     ALL=(qa) ALL
joerg     ALL=(qa) ALL
djpig     ALL=(qa) ALL

nagios  ALL=(ALL) NOPASSWD: /usr/lib/nagios/plugins/dsa-check-dabackup ""
nagios  ALL=(ALL) NOPASSWD: /usr/sbin/samhain -t check --foreground -p err -s none -l none -m none