projects
/
mirror
/
dsa-puppet.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
sudoers: add entry for gobby role account
[mirror/dsa-puppet.git]
/
modules
/
sudo
/
files
/
common
/
sudoers
diff --git
a/modules/sudo/files/common/sudoers
b/modules/sudo/files/common/sudoers
index
790b293
..
b05b76a
100644
(file)
--- a/
modules/sudo/files/common/sudoers
+++ b/
modules/sudo/files/common/sudoers
@@
-21,7
+21,7
@@
Defaults env_reset
Defaults passprompt="[sudo] password for %u on %h: "
# Host alias specification
Defaults passprompt="[sudo] password for %u on %h: "
# Host alias specification
-Host_Alias QAHOSTS = master,
merkel,
quantz
+Host_Alias QAHOSTS = master, quantz
Host_Alias WEBHOSTS = wolkenstein
Host_Alias SECHOSTS = chopin
Host_Alias FTPHOSTS = franck, morricone
Host_Alias WEBHOSTS = wolkenstein
Host_Alias SECHOSTS = chopin
Host_Alias FTPHOSTS = franck, morricone
@@
-109,6
+109,10
@@
nagios beethoven=(debbackup) NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backup
%mujeres ALL=(women) ALL
%wikiadm ALL=(wiki) ALL
%qa-core QAHOSTS=(qa) ALL
%mujeres ALL=(women) ALL
%wikiadm ALL=(wiki) ALL
%qa-core QAHOSTS=(qa) ALL
+%gobby gombert=(gobby) ALL
+
+# the dak user gets to run stuff as dak-unpriv (for things like lintian checks)
+dak ALL=(dak-unpriv) NOPASSWD: ALL
# some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost
%apachectrl ALL=(root) /usr/sbin/apache2-vhost-update
# some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost
%apachectrl ALL=(root) /usr/sbin/apache2-vhost-update