X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;ds=sidebyside;f=modules%2Fsudo%2Ffiles%2Fper-host%2Fliszt.debian.org%2Fsudoers;fp=modules%2Fsudo%2Ffiles%2Fper-host%2Fliszt.debian.org%2Fsudoers;h=ce57bc8a7dc9420244334b70e51c06f318bcbe8a;hb=d0ba5dc906cbff4a9dd947d461a15be4cc8fd761;hp=0000000000000000000000000000000000000000;hpb=6c73eb516652d9a03f7b5835dd49de76c793b0bb;p=mirror%2Fdsa-puppet.git

diff --git a/modules/sudo/files/per-host/liszt.debian.org/sudoers b/modules/sudo/files/per-host/liszt.debian.org/sudoers
new file mode 100644
index 000000000..ce57bc8a7
--- /dev/null
+++ b/modules/sudo/files/per-host/liszt.debian.org/sudoers
@@ -0,0 +1,49 @@
+##
+## THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
+## USE: git clone git+ssh://$USER@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet.git
+##
+
+# /etc/sudoers
+#
+# This file MUST be edited with the 'visudo' command as root.
+#
+# See the man page for details on how to write a sudoers file.
+#
+
+Defaults	env_reset
+
+# Host alias specification
+
+# User alias specification
+
+# Cmnd alias specification
+
+# User privilege specification
+root	ALL=(ALL) ALL
+%adm    ALL=(ALL) ALL
+%adm    ALL=(ALL) NOPASSWD: /usr/bin/apt-get update, /usr/bin/apt-get dist-upgrade, /usr/bin/apt-get clean, /usr/sbin/samhain -t check -i -p err -s none -l none -m none
+
+# Listmaster stuff
+%listweb  ALL=(listweb) NOPASSWD: ALL
+%list  ALL=(list) NOPASSWD: ALL
+
+%list  ALL=(root) NOPASSWD: /usr/sbin/postfix reload
+%list  ALL=(root) NOPASSWD: /usr/sbin/qshape
+%list  ALL=(root) /usr/sbin/postsuper
+%list  ALL=(root) /etc/init.d/spamassassin restart
+%list  ALL=(root) /etc/init.d/amavisd
+%list  ALL=(root) /usr/local/sbin/amavisd-new
+%list  ALL=(amavis) NOPASSWD: ALL
+
+%apachectrl     ALL=(root) /usr/sbin/apache2-vhost-update
+
+nagios  ALL=(ALL) NOPASSWD: /usr/bin/arrayprobe ""
+nagios  ALL=(ALL) NOPASSWD: /usr/lib/nagios/plugins/dsa-check-dabackup ""
+nagios  ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller all show
+nagios  ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 pd all show
+nagios  ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 pd [0-9]\:[0-9] show
+nagios  ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 pd [0-9]I\:[0-9]\:[0-9] show
+nagios  ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 show status
+nagios  ALL=(ALL) NOPASSWD: /usr/sbin/samhain -t check --foreground -p err -s none -l none -m none
+
+