sudoers: add entry for gobby role account

[mirror/dsa-puppet.git] / modules / sudo / files / common / sudoers

diff --git a/modules/sudo/files/common/sudoers b/modules/sudo/files/common/sudoers
index 790b293..b05b76a 100644 (file)
--- a/modules/sudo/files/common/sudoers
+++ b/modules/sudo/files/common/sudoers
@@ -21,7 +21,7 @@ Defaults      env_reset
 Defaults       passprompt="[sudo] password for %u on %h: "
 
 # Host alias specification
-Host_Alias     QAHOSTS         = master, merkel, quantz
+Host_Alias     QAHOSTS         = master, quantz
 Host_Alias     WEBHOSTS        = wolkenstein
 Host_Alias     SECHOSTS        = chopin
 Host_Alias     FTPHOSTS        = franck, morricone
@@ -109,6 +109,10 @@ nagios             beethoven=(debbackup)   NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backup
 %mujeres       ALL=(women)     ALL
 %wikiadm       ALL=(wiki)      ALL
 %qa-core       QAHOSTS=(qa)    ALL
+%gobby         gombert=(gobby) ALL
+
+# the dak user gets to run stuff as dak-unpriv (for things like lintian checks)
+dak            ALL=(dak-unpriv)        NOPASSWD: ALL
 
 # some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost
 %apachectrl    ALL=(root)      /usr/sbin/apache2-vhost-update