X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fsudo%2Ffiles%2Fsudoers;h=5fb60917876d8537718ecaf7681e36ac1fd536b7;hb=dc4bca4a6cc4604554c970a4d03d0f5f9c3a1c10;hp=5ca09343d42c1d51df54e9ea7436e159da27b53c;hpb=14651cf5a6e986077c19257de79299c39785d771;p=mirror%2Fdsa-puppet.git

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index 5ca09343d..5fb609178 100644
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -33,7 +33,7 @@ Host_Alias	FTPHOSTS	= fasolo
 Host_Alias	ZIVITHOSTS	= zelenka, zandonai
 Host_Alias	AACRAIDHOSTS	= pettersson
 Host_Alias	MEGARAIDHOSTS	= sibelius
-Host_Alias	DELLHOSTS	= schumann, wieck, manda-node03, manda-node04
+Host_Alias	DELLHOSTS	= schumann, wieck, manda-node03, manda-node04, schmelzer, smit
 Host_Alias	LISTHOSTS	= bendel
 Host_Alias	BUILDD_MASTER	= wuiet
 Host_Alias	PORTERBOXES	= abel, amdahl, barriere, eller, harris, minkus, plummer, zelenka
@@ -63,7 +63,9 @@ nagios		ALL=(ALL)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-filesystems ""
 nagios		ALL=(ALL)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-libs --ignore-younger=1h
 nagios		ALL=(ALL)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-stunnel-sanity ""
 nagios		ALL=(ALL)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-systemd-services ""
+nagios		ALL=(ALL)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-ucode-intel ""
 nagios		handel=(puppet)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem
+nagios		handel=(puppet)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-cert-expire /srv/puppet.debian.org/ca/ca.crt
 # with smartarray controllers
 nagios		ALL=(ALL)	NOPASSWD: /sbin/hpasmcli ""
 nagios		ALL=(ALL)	NOPASSWD: /usr/bin/arrayprobe ""
@@ -89,7 +91,7 @@ nagios		AACRAIDHOSTS=(ALL)	NOPASSWD: /usr/local/bin/arcconf GETCONFIG 1 LD, /usr
 nagios		MEGARAIDHOSTS=(ALL)	NOPASSWD: /usr/local/bin/megarc -AllAdpInfo -nolog, /usr/local/bin/megarc -dispCfg -a0 -nolog
 nagios		DELLHOSTS=(ALL)		NOPASSWD: /usr/lib/nagios/plugins/dsa-check-openmanage ""
 nagios		DELLHOSTS=(ALL)		NOPASSWD: /usr/lib/nagios/plugins/dsa-check-openmanage -b bp=0
-nagios		DELLHOSTS=(ALL)		NOPASSWD: /usr/lib/nagios/plugins/dsa-check-openmanage -b bp=0 -b bat_charge=0:0
+nagios		DELLHOSTS=(ALL)		NOPASSWD: /usr/lib/nagios/plugins/dsa-check-openmanage -b bp=0 -b bat_charge=0\:0
 # other nagios things
 nagios		backuphost=(debbackup)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg ""
 nagios		storace=(debbackup)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg ""
@@ -147,6 +149,7 @@ git		godard=(salsa-signup)	NOPASSWD: ALL
 git		godard=(salsa-webhook)	NOPASSWD: ALL
 git		godard=(salsa-pages)	NOPASSWD: ALL
 %keyring	ALL=(keyring)	ALL
+%keyring	kaufmann=(root)		NOPASSWD: /usr/sbin/service bind9 reload
 %jenkins-adm	ALL=(jenkins-adm)	ALL
 %lintian	ALL=(lintian)	ALL
 %listweb	ALL=(listweb)	ALL
@@ -184,7 +187,6 @@ git		godard=(salsa-pages)	NOPASSWD: ALL
 %debsso		diabelli=(debsso)	ALL
 %debsso-web	diabelli=(debsso-web)	ALL
 %debconf-web	debussy=(debconf-web)	ALL
-%kanboard	kantuser=(kanboard)	ALL
 
 # the dak user gets to run stuff as dak-unpriv (for things like lintian checks)
 %ftptrainee	FTPHOSTS=(dak-unpriv)	NOPASSWD: /usr/bin/lintian
@@ -244,10 +246,12 @@ pabs		dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component time
 %debconfstatic	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component es.debconf.org
 %debconfstatic	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component fr.debconf.org
 %debconfstatic	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component miniconf10.debconf.org
+%debconfstatic	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component wiki.debconf.org
+%debconfstatic	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component www.debconf.org
 mini-dak	porta=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component incoming.ports.debian.org
-%wbadm		wuiet=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component apt.buildd.debian.org
 %manpages	manziarly=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component manpages.debian.org
 %dpl		dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component dpl.debian.org
+%keyring	kaufmann=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component openpgpkey.debian.org
 
 # The piuparts slave needs to handle chroots
 piupartss	PIUPARTS_SLAVE_HOSTS=(ALL)		NOPASSWD: ALL