X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;ds=sidebyside;f=modules%2Fsudo%2Ffiles%2Fcommon%2Fsudoers;h=2ce9eab7ac44207364aaa4f600965e4f8d1decda;hb=51b5f3b073bc2272dab3f17fa3b12ba79aaf0887;hp=c46925ce2a0a4dba1ce2303e5bbb8c2338617758;hpb=f111a8b0336e5e663c0101af0bfec5d3dcc192a7;p=mirror%2Fdsa-puppet.git diff --git a/modules/sudo/files/common/sudoers b/modules/sudo/files/common/sudoers index c46925ce2..2ce9eab7a 100644 --- a/modules/sudo/files/common/sudoers +++ b/modules/sudo/files/common/sudoers @@ -45,11 +45,18 @@ nagios ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 pd all show nagios ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 pd [0-9]\:[0-9] show nagios ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 pd [0-9]I\:[0-9]\:[0-9] show nagios ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 show status +# other raid controllers +nagios powell=(ALL) NOPASSWD: /usr/local/sbin/areca-cli vsf info +nagios puccini=(ALL) NOPASSWD: /usr/local/bin/tw_cli info c0 u0 status # groups and their role accounts %buildd ALL=(buildd) ALL +%d-i ALL=(d-i) ALL +%debadmin ALL=(dak) ALL %debbugs ALL=(debbugs) ALL %debwww ALL=(debwww) ALL +%forums ALL=(forums) ALL +%keyring ALL=(keyring) ALL %lintian ALL=(lintian) ALL %mirroradm ALL=(archvsync) ALL %piuparts ALL=(piupartsm) ALL @@ -59,6 +66,7 @@ nagios ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 show status %popcon ALL=(popcon) ALL %snapshot ALL=(snapshot) ALL %uddadm ALL=(udd) ALL +%wbadm ALL=(wbadm) ALL %wikiadm ALL=(wiki) ALL # some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost @@ -68,6 +76,7 @@ nagios ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 show status # FIXME: change that ALL for hosts to a hostlist of buildds? Defaults:buildd env_reset,env_keep+="APT_CONFIG DEBIAN_FRONTEND" buildd ALL=(ALL) NOPASSWD: ALL + # The piuparts slave needs to handle chroots piupartss piatti=(ALL) NOPASSWD: ALL # trigger of mirror run for packages @@ -76,3 +85,4 @@ pkg_user powell=(archvsync) NOPASSWD: /home/archvsync/bin/pushpdo %adm ALL=(root) NOPASSWD: /etc/init.d/bind9 reload # remote power to babylon5 in the same rack: joerg unger=(ALL) /usr/bin/sispmctl -t 1, /usr/bin/sispmctl -g 1 +%wbadm raff=(root) /usr/local/bin/update-buildd-sshkeys