X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fsudo%2Ffiles%2Fsudoers;h=df5cea9fe16cc6d7e95de3358a338fec36edca12;hb=69e48f13d90588d81f1513e0e0155008ae82b287;hp=1ab1b5eae634fd649f4a5c31d38783aeed7f2c7e;hpb=86f4b5348d4cdf1fdf01b3eafab03a01979b845c;p=mirror%2Fdsa-puppet.git diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers index 1ab1b5eae..df5cea9fe 100644 --- a/modules/sudo/files/sudoers +++ b/modules/sudo/files/sudoers @@ -45,11 +45,6 @@ root ALL=(ALL) ALL # DSA and local admins %adm ALL=(ALL) ALL -# XXX -# until march 2017 -93sam acker=(ALL) ALL -kibi acker=(ALL) ALL - %adm ALL=(ALL) NOPASSWD: /usr/bin/apt-get update, /usr/bin/apt-get upgrade, /usr/bin/apt-get dist-upgrade, /usr/bin/apt-get clean, /usr/sbin/samhain -t check -i -p err -s none -l none -m none, /usr/sbin/upgrade-porter-chroots %zivit-admins ZIVITHOSTS=(ALL) NOPASSWD: ALL @@ -63,7 +58,6 @@ nagios ALL=(ALL) NOPASSWD: /usr/lib/nagios/plugins/dsa-check-dabackup "" nagios ALL=(ALL) NOPASSWD: /usr/lib/nagios/plugins/dsa-check-filesystems "" nagios ALL=(ALL) NOPASSWD: /usr/lib/nagios/plugins/dsa-check-libs "" nagios ALL=(ALL) NOPASSWD: /usr/lib/nagios/plugins/dsa-check-stunnel-sanity "" -nagios ALL=(ALL) NOPASSWD: /usr/local/sbin/dsa-check-libs "" nagios handel=(puppet) NOPASSWD: /usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem # with smartarray controllers nagios ALL=(ALL) NOPASSWD: /sbin/hpasmcli "" @@ -114,6 +108,7 @@ nagios storace=(debbackup) NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg %debian-r ALL=(debian-r) ALL %debian-r ALL=(debian-r-wb-buildd) ALL %debian-release ALL=(release) ALL +%debsources ALL=(debsources) ALL %debtags ALL=(debtags) ALL %debwww ALL=(debwww) ALL %dedup ALL=(dedup) ALL @@ -223,6 +218,7 @@ pabs dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component time mini-dak porta=(staticsync) NOPASSWD: /usr/local/bin/static-update-component incoming.ports.debian.org %wbadm wuiet=(staticsync) NOPASSWD: /usr/local/bin/static-update-component apt.buildd.debian.org %manpages manziarly=(staticsync) NOPASSWD: /usr/local/bin/static-update-component manpages.debian.org +%dpl dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component dpl.debian.org # The piuparts slave needs to handle chroots piupartss PIUPARTS_SLAVE_HOSTS=(ALL) NOPASSWD: ALL