Set nfs client ip range for senfter

[mirror/dsa-puppet.git] / modules / sudo / files / sudoers

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index c57d571..8159d5d 100644 (file)
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -32,7 +32,6 @@ Host_Alias    MEGARAIDHOSTS   = rautavaara, sibelius
 Host_Alias     MEGACTLHOSTS    = nielsen
 Host_Alias     LISTHOSTS       = bendel
 Host_Alias     BUILDD_MASTER   = wuiet
-Host_Alias     BUILDD_PORTS_MASTER     = portman
 Host_Alias     PORTERBOXES     = abel, asachi, barriere, etler, falla, fischer, harris, merulo, minkus, partch, plummer, pizzetti, smetana, zelenka
 Host_Alias     PIUPARTS_SLAVE_HOSTS    = piu-slave-bm-a
 Host_Alias     MQ_HOSTS        = rainier, rapoport
@@ -133,6 +132,7 @@ nagios              storace=(debbackup)     NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg
 %list          LISTHOSTS=(list)        ALL
 # archives and stuff
 %list          master=(debian) ALL
+%manpages      ALL=(manpages)  ALL
 %mirroradm     ALL=(archvsync) ALL
 %nm            ALL=(nm)        ALL
 %patch-tracker ALL=(patch-tracker)     ALL
@@ -153,7 +153,6 @@ nagios              storace=(debbackup)     NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg
 %videoteam     vittoria=(veyepar)      ALL
 %volatile      ALL=(volatile)  ALL
 %wbadm         ALL=(wbadm)     ALL
-%wbadm-ports   ALL=(wbadm-ports)       ALL
 %mujeres       ALL=(women)     ALL
 %wikiadm       ALL=(wiki,wikiweb)      ALL
 %qa-core       ALL=(qa)        ALL
@@ -195,6 +194,7 @@ debwww              wolkenstein=(staticsync)        NOPASSWD: /usr/local/bin/static-update-componen
 %Debian                dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component wnpp-by-tags.debian.net
 %Debian                dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component mozilla.debian.net
 %ports         dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component www.ports.debian.org
+%debian-release        respighi=(staticsync)           NOPASSWD: /usr/local/bin/static-update-component release.debian.org
 %debvoip       dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component rtc.debian.org
 %security      dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component security-team.debian.org
 %publicity     dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component timeline.debian.net
@@ -212,19 +212,18 @@ pabs              dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component time
 %debconfstatic dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component es.debconf.org
 %debconfstatic dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component fr.debconf.org
 %debconfstatic dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component miniconf10.debconf.org
+mini-dak       porta=(staticsync)              NOPASSWD: /usr/local/bin/static-update-component incoming.ports.debian.org
 
 # The piuparts slave needs to handle chroots
 piupartss      PIUPARTS_SLAVE_HOSTS=(ALL)              NOPASSWD: ALL
 # trigger of mirror run for packages
 #pkg_user      powell=(archvsync)      NOPASSWD: /home/archvsync/bin/pushpdo
 dnsadm         denis=(root)                    NOPASSWD: /usr/sbin/service bind9 reload
+letsencrypt    denis=(dnsadm)                  NOPASSWD: /srv/dns.debian.org/bin/update
 %adm           draghi=(puppet)                 NOPASSWD: /usr/bin/make -s -C /srv/db.debian.org/var/gitnagios/dsa-nagios/config install
 # wbadm can update all buildd* users' keys on buildd.d.o
 %wbadm         BUILDD_MASTER=(wb-buildd)       ALL
 %wbadm         BUILDD_MASTER=(root)            /usr/local/bin/update-buildd-sshkeys
-# wbadm can update all buildd* users' keys on buildd.d.o
-%wbadm-ports   BUILDD_PORTS_MASTER=(wb-buildd) ALL
-%wbadm-ports   BUILDD_PORTS_MASTER=(root)      /usr/local/bin/update-buildd-sshkeys
 # mirror push
 dak            FTPHOSTS,SECHOSTS=(archvsync)   NOPASSWD:/home/archvsync/runmirrors
 dak            franck=(backports)      NOPASSWD: /home/backports/bin/update-archive
@@ -276,3 +275,7 @@ cinder              NOVAHOSTS=(root)        NOPASSWD: /usr/bin/cinder-rootwrap /etc/cinder/rootwrap
 %openstack     NOVAHOSTS=(heat)        ALL
 %openstack     NOVAHOSTS=(neutron)     ALL
 %openstack     NOVAHOSTS=(nova)        ALL
+
+# ports stuff
+mini-dak       porta=(archvsync)       NOPASSWD: /home/archvsync/signal_ports
+mini-dak       porta=(archvsync)       NOPASSWD: /home/archvsync/signal_ports-cd