only user planet should call static-update-component on senfl. allow debwww to call...

[mirror/dsa-puppet.git] / modules / sudo / files / sudoers

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index c870185..4466dda 100644 (file)
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -128,9 +128,10 @@ dak                ALL=(dak-unpriv)        NOPASSWD: ALL
 Defaults:buildd env_reset,env_keep+="APT_CONFIG DEBIAN_FRONTEND"
 buildd         ALL=(ALL)               NOPASSWD: ALL
 
-%planet                senfl=(staticsync)      NOPASSWD: /usr/local/bin/static-update-component planet.debian.org
-%debbits       master=(staticsync)     NOPASSWD: /usr/local/bin/static-update-component bits.debian.org
 %backports     franck,ries=(staticsync)        NOPASSWD: /usr/local/bin/static-update-component backports.debian.org
+%debbits       master=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component bits.debian.org
+planet         senfl=(staticsync)              NOPASSWD: /usr/local/bin/static-update-component planet.debian.org
+debwww         wolkenstein=(staticsync)        NOPASSWD: /usr/local/bin/static-update-component www.debian.org
 
 # The piuparts slave needs to handle chroots
 piupartss      piatti=(ALL)            NOPASSWD: ALL