X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fsudo%2Ffiles%2Fcommon%2Fsudoers;h=11fce4590338fb7a3bf37c71b4b1ab4ed6f95756;hb=06bdad6a92d22ee019f7b22dc918d40bd2ac7882;hp=a404c23ad30b2fa4cd7b2a744f70eef24659bf2a;hpb=06b58837a172c84036e6897267f3f96c0923741b;p=mirror%2Fdsa-puppet.git diff --git a/modules/sudo/files/common/sudoers b/modules/sudo/files/common/sudoers index a404c23ad..11fce4590 100644 --- a/modules/sudo/files/common/sudoers +++ b/modules/sudo/files/common/sudoers @@ -20,8 +20,9 @@ Defaults env_reset # Host alias specification - +Host_Alias QAHOSTS = master, merkel # User alias specification +User_Alias QACORE = aba, djpig, hertzog, jeroen, joerg, lucas, luk, myon, tbm, weasel, zack # Cmnd alias specification @@ -46,12 +47,14 @@ nagios ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 pd [0-9]\:[0-9] nagios ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 pd [0-9]I\:[0-9]\:[0-9] show nagios ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 show status # other raid controllers +nagios master=(ALL) NOPASSWD: /usr/sbin/mpt-status -s nagios powell=(ALL) NOPASSWD: /usr/local/sbin/areca-cli vsf info nagios puccini=(ALL) NOPASSWD: /usr/local/bin/tw_cli info c0 u0 status # groups and their role accounts %buildd ALL=(buildd) ALL %d-i ALL=(d-i) ALL +%dde ALL=(dde) ALL %debadmin ALL=(dak) ALL %debbugs ALL=(debbugs) ALL %debian-release ALL=(release) ALL @@ -60,15 +63,18 @@ nagios puccini=(ALL) NOPASSWD: /usr/local/bin/tw_cli info c0 u0 status %keyring ALL=(keyring) ALL %lintian ALL=(lintian) ALL %mirroradm ALL=(archvsync) ALL +%nm ALL=(nm) ALL %piuparts ALL=(piupartsm) ALL %piuparts ALL=(piupartss) ALL %pkg_maint ALL=(pkg_user) ALL %planet ALL=(planet) ALL %popcon ALL=(popcon) ALL +%secretary ALL=(secretary) ALL %snapshot ALL=(snapshot) ALL %uddadm ALL=(udd) ALL %wbadm ALL=(wbadm) ALL %wikiadm ALL=(wiki) ALL +QACORE QAHOSTS=(qa) ALL # some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost %apachectrl ALL=(root) /usr/sbin/apache2-vhost-update