projects
/
mirror
/
dsa-puppet.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
Stop taking backups from franck
[mirror/dsa-puppet.git]
/
modules
/
sudo
/
files
/
sudoers
diff --git
a/modules/sudo/files/sudoers
b/modules/sudo/files/sudoers
index
361a776
..
a512c68
100644
(file)
--- a/
modules/sudo/files/sudoers
+++ b/
modules/sudo/files/sudoers
@@
-25,16
+25,17
@@
Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/
Host_Alias VOIPHOSTS = vogler
Host_Alias WEBHOSTS = wolkenstein
Host_Alias SECHOSTS = seger
Host_Alias VOIPHOSTS = vogler
Host_Alias WEBHOSTS = wolkenstein
Host_Alias SECHOSTS = seger
-Host_Alias FTPHOSTS = franck
+Host_Alias FTPHOSTS = franck
, fasolo
Host_Alias ZIVITHOSTS = zelenka, zandonai
Host_Alias AACRAIDHOSTS = pettersson
Host_Alias MEGARAIDHOSTS = rautavaara, sibelius
Host_Alias LISTHOSTS = bendel
Host_Alias BUILDD_MASTER = wuiet
Host_Alias ZIVITHOSTS = zelenka, zandonai
Host_Alias AACRAIDHOSTS = pettersson
Host_Alias MEGARAIDHOSTS = rautavaara, sibelius
Host_Alias LISTHOSTS = bendel
Host_Alias BUILDD_MASTER = wuiet
-Host_Alias PORTERBOXES = abel, asachi, barriere, e
t
ler, falla, fischer, harris, minkus, partch, plummer, pizzetti, zelenka
+Host_Alias PORTERBOXES = abel, asachi, barriere, e
l
ler, falla, fischer, harris, minkus, partch, plummer, pizzetti, zelenka
Host_Alias PIUPARTS_SLAVE_HOSTS = piu-slave-bm-a
Host_Alias MQ_HOSTS = rainier, rapoport
Host_Alias NOVAHOSTS = oyens
Host_Alias PIUPARTS_SLAVE_HOSTS = piu-slave-bm-a
Host_Alias MQ_HOSTS = rainier, rapoport
Host_Alias NOVAHOSTS = oyens
+Host_Alias JENKINSHOSTS = jerea
# Cmnd alias specification
# Cmnd alias specification
@@
-95,6
+96,7
@@
nagios storace=(debbackup) NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg
%auditor ALL=(accounting) ALL
%backports ALL=(backports) ALL
%blends ALL=(blends) ALL
%auditor ALL=(accounting) ALL
%backports ALL=(backports) ALL
%blends ALL=(blends) ALL
+%bootstrap ALL=(bootstrap) ALL
%btslink ALL=(btslink) ALL
%buildd ALL=(buildd) ALL
%codesearch ALL=(codesearch) ALL
%btslink ALL=(btslink) ALL
%buildd ALL=(buildd) ALL
%codesearch ALL=(codesearch) ALL
@@
-177,13
+179,15
@@
Defaults:buildd env_reset,env_keep+="APT_CONFIG DEBIAN_FRONTEND"
buildd ALL=(ALL) NOPASSWD: ALL
%appstream mekeel=(staticsync) NOPASSWD: /usr/local/bin/static-update-component appstream.debian.org
buildd ALL=(ALL) NOPASSWD: ALL
%appstream mekeel=(staticsync) NOPASSWD: /usr/local/bin/static-update-component appstream.debian.org
-%backports franck,coccia=(staticsync) NOPASSWD: /usr/local/bin/static-update-component backports.debian.org
+%backports FTPHOSTS,coccia=(staticsync) NOPASSWD: /usr/local/bin/static-update-component backports.debian.org
+%bootstrap boott=(staticsync) NOPASSWD: /usr/local/bin/static-update-component bootstrap.debian.net
d-i dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component d-i.debian.org
lucas dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component debaday.debian.net
dsa dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component dsa.debian.org
d-i dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component d-i.debian.org
lucas dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component debaday.debian.net
dsa dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component dsa.debian.org
-dak franck=(staticsync) NOPASSWD: /usr/local/bin/static-update-component incoming.debian.org
-dak franck=(staticsync) NOPASSWD: /usr/local/bin/static-update-component metadata.ftp-master.debian.org
-%publicity master=(staticsync) NOPASSWD: /usr/local/bin/static-update-component bits.debian.org
+dak FTPHOSTS=(staticsync) NOPASSWD: /usr/local/bin/static-update-component incoming.debian.org
+dak FTPHOSTS=(staticsync) NOPASSWD: /usr/local/bin/static-update-component metadata.ftp-master.debian.org
+%publicity dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component bits.debian.org
+%publicity dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component micronews.debian.org
%debdelta donizetti=(staticsync) NOPASSWD: /usr/local/bin/static-update-component debdeltas.debian.net
%webwml master=(staticsync) NOPASSWD: /usr/local/bin/static-update-component network-test.debian.org
planet philp=(staticsync) NOPASSWD: /usr/local/bin/static-update-component planet.debian.org
%debdelta donizetti=(staticsync) NOPASSWD: /usr/local/bin/static-update-component debdeltas.debian.net
%webwml master=(staticsync) NOPASSWD: /usr/local/bin/static-update-component network-test.debian.org
planet philp=(staticsync) NOPASSWD: /usr/local/bin/static-update-component planet.debian.org
@@
-193,6
+197,7
@@
debwww wolkenstein=(staticsync) NOPASSWD: /usr/local/bin/static-update-componen
%Debian dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component mozilla.debian.net
%ports dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component www.ports.debian.org
%debian-release respighi=(staticsync) NOPASSWD: /usr/local/bin/static-update-component release.debian.org
%Debian dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component mozilla.debian.net
%ports dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component www.ports.debian.org
%debian-release respighi=(staticsync) NOPASSWD: /usr/local/bin/static-update-component release.debian.org
+%debian-release coccia=(staticsync) NOPASSWD: /usr/local/bin/static-update-component release.debian.org-pu
%debvoip dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component rtc.debian.org
%security dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component security-team.debian.org
%publicity dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component timeline.debian.net
%debvoip dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component rtc.debian.org
%security dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component security-team.debian.org
%publicity dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component timeline.debian.net
@@
-207,6
+212,7
@@
pabs dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component time
%debconfstatic dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component debconf5.debconf.org
%debconfstatic dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component debconf6.debconf.org
%debconfstatic dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component debconf7.debconf.org
%debconfstatic dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component debconf5.debconf.org
%debconfstatic dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component debconf6.debconf.org
%debconfstatic dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component debconf7.debconf.org
+%debconfstatic dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component debconf16.debconf.org
%debconfstatic dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component es.debconf.org
%debconfstatic dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component fr.debconf.org
%debconfstatic dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component miniconf10.debconf.org
%debconfstatic dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component es.debconf.org
%debconfstatic dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component fr.debconf.org
%debconfstatic dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component miniconf10.debconf.org
@@
-224,7
+230,7
@@
letsencrypt denis=(dnsadm) NOPASSWD: /srv/dns.debian.org/bin/update
%wbadm BUILDD_MASTER=(root) /usr/local/bin/update-buildd-sshkeys
# mirror push
dak FTPHOSTS,SECHOSTS=(archvsync) NOPASSWD:/home/archvsync/runmirrors
%wbadm BUILDD_MASTER=(root) /usr/local/bin/update-buildd-sshkeys
# mirror push
dak FTPHOSTS,SECHOSTS=(archvsync) NOPASSWD:/home/archvsync/runmirrors
-dak
franck=(backports)
NOPASSWD: /home/backports/bin/update-archive
+dak
FTHOSTS=(backports)
NOPASSWD: /home/backports/bin/update-archive
# archvsync triggers snapshot
archvsync sibelius=(snapshot) NOPASSWD: /srv/snapshot.debian.org/bin/update-trigger
archvsync sibelius=(snapshot) NOPASSWD: /srv/2ndsnapshot/bin/update-trigger
# archvsync triggers snapshot
archvsync sibelius=(snapshot) NOPASSWD: /srv/snapshot.debian.org/bin/update-trigger
archvsync sibelius=(snapshot) NOPASSWD: /srv/2ndsnapshot/bin/update-trigger
@@
-236,6
+242,7
@@
archvsync sibelius=(snapshot) NOPASSWD: /srv/2ndsnapshot/bin/update-trigger
%sec_public SECHOSTS=(dak) NOPASSWD: /usr/local/bin/dak new-security-install -[AR]
%sec_public SECHOSTS=(dak) NOPASSWD: /home/dak/trigger_mirror
dak SECHOSTS=(archvsync) NOPASSWD: /home/archvsync/signal_security
%sec_public SECHOSTS=(dak) NOPASSWD: /usr/local/bin/dak new-security-install -[AR]
%sec_public SECHOSTS=(dak) NOPASSWD: /home/dak/trigger_mirror
dak SECHOSTS=(archvsync) NOPASSWD: /home/archvsync/signal_security
+dak SECHOSTS=(archvsync) NOPASSWD: /home/archvsync/signal_security-buildd-pool
# web stuff
debwww WEBHOSTS=(archvsync) NOPASSWD: /home/archvsync/webmirrors/runmirrors
%publicity WEBHOSTS=(debwww) /srv/www.debian.org/update-part News
# web stuff
debwww WEBHOSTS=(archvsync) NOPASSWD: /home/archvsync/webmirrors/runmirrors
%publicity WEBHOSTS=(debwww) /srv/www.debian.org/update-part News
@@
-253,12
+260,15
@@
geodnssync geo1,geo2,geo3=(root) NOPASSWD: /usr/sbin/service bind9 reload
geodnssync geo1,geo2,geo3=(root) NOPASSWD: /usr/sbin/rndc reconfig
# pushed nagiosadm reload icinga on tchaikovsky
nagiosadm tchaikovsky=(root) NOPASSWD: /usr/sbin/service icinga reload
geodnssync geo1,geo2,geo3=(root) NOPASSWD: /usr/sbin/rndc reconfig
# pushed nagiosadm reload icinga on tchaikovsky
nagiosadm tchaikovsky=(root) NOPASSWD: /usr/sbin/service icinga reload
-
-%Debian,%guest,%d-i PORTERBOXES=(root) NOPASSWD: /usr/local/bin/dd-schroot-cmd
-
# voip stuff
%debvoip VOIPHOSTS=(root) /usr/sbin/service resiprocate-turn-server restart, /usr/sbin/service repro restart
%debvoip VOIPHOSTS=(root) /usr/sbin/service prosody restart, /usr/sbin/service prosody reload, /usr/sbin/service prosody stop, /usr/sbin/service prosody start
# voip stuff
%debvoip VOIPHOSTS=(root) /usr/sbin/service resiprocate-turn-server restart, /usr/sbin/service repro restart
%debvoip VOIPHOSTS=(root) /usr/sbin/service prosody restart, /usr/sbin/service prosody reload, /usr/sbin/service prosody stop, /usr/sbin/service prosody start
+# jenkins
+%jenkins-adm JENKINSHOSTS=(jenkins) ALL
+%jenkins-adm JENKINSHOSTS=(root) /usr/sbin/service jenkins restart, /usr/sbin/service jenkins reload, /usr/sbin/service jenkins stop, /usr/sbin/service jenkins start
+
+%Debian,%guest,%d-i PORTERBOXES=(root) NOPASSWD: /usr/local/bin/dd-schroot-cmd
+
# Openstack stuff
Defaults:neutron !requiretty
# Openstack stuff
Defaults:neutron !requiretty