Allow debadmin to sudo to codesign

[mirror/dsa-puppet.git] / modules / sudo / files / sudoers

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index ba18bf4..47a6405 100644 (file)
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -107,6 +107,7 @@ nagios              storace=(debbackup)     NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg
 %ddtp          ALL=(ddtp)      ALL
 %debadmin      ALL=(dak)       ALL
 %debadmin      ALL=(dak-code)  ALL
+%debadmin      ALL=(codesign)  ALL
 %debbugs       ALL=(debbugs)   ALL
 %debbugs       ALL=(debbugs-mirror)    ALL
 %debconfstatic ALL=(debconfstatic)     ALL
@@ -139,6 +140,10 @@ nagios             storace=(debbackup)     NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg
 %gitdoadm      godard=(salsa-signup)   ALL
 %gitdoadm      godard=(salsa-webhook)  ALL
 %gitdoadm      godard=(salsa-pages)    ALL
+git            godard=(salsa-registry) NOPASSWD: ALL
+git            godard=(salsa-signup)   NOPASSWD: ALL
+git            godard=(salsa-webhook)  NOPASSWD: ALL
+git            godard=(salsa-pages)    NOPASSWD: ALL
 %keyring       ALL=(keyring)   ALL
 %jenkins-adm   ALL=(jenkins-adm)       ALL
 %lintian       ALL=(lintian)   ALL