give keyring the ability to reload bind9

[mirror/dsa-puppet.git] / modules / sudo / files / sudoers

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index f1c1470..5fb6091 100644 (file)
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -149,6 +149,7 @@ git         godard=(salsa-signup)   NOPASSWD: ALL
 git            godard=(salsa-webhook)  NOPASSWD: ALL
 git            godard=(salsa-pages)    NOPASSWD: ALL
 %keyring       ALL=(keyring)   ALL
+%keyring       kaufmann=(root)         NOPASSWD: /usr/sbin/service bind9 reload
 %jenkins-adm   ALL=(jenkins-adm)       ALL
 %lintian       ALL=(lintian)   ALL
 %listweb       ALL=(listweb)   ALL
@@ -250,6 +251,7 @@ pabs                dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component time
 mini-dak       porta=(staticsync)              NOPASSWD: /usr/local/bin/static-update-component incoming.ports.debian.org
 %manpages      manziarly=(staticsync)          NOPASSWD: /usr/local/bin/static-update-component manpages.debian.org
 %dpl           dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component dpl.debian.org
+%keyring       kaufmann=(staticsync)           NOPASSWD: /usr/local/bin/static-update-component openpgpkey.debian.org
 
 # The piuparts slave needs to handle chroots
 piupartss      PIUPARTS_SLAVE_HOSTS=(ALL)              NOPASSWD: ALL