sudoers: ordering for dak-unpriv user

The dak user is allowed to run any command as dak-unpriv however it
cannot pass environment variables to lintian as the last entry matched
counts.

Signed-off-by: Peter Palfrader <peter@palfrader.org>

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index 51e3a0c..196bb4a 100644 (file)
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -118,8 +118,8 @@ nagios              beethoven=(debbackup)   NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backup
 %gobby         gombert=(gobby) ALL
 
 # the dak user gets to run stuff as dak-unpriv (for things like lintian checks)
-dak            ALL=(dak-unpriv)        NOPASSWD: ALL
 %ftptrainee    FTPHOSTS=(dak-unpriv)   NOPASSWD: /usr/bin/lintian
+dak            ALL=(dak-unpriv)        NOPASSWD: ALL
 
 # some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost
 %apachectrl    ALL=(root)      /usr/sbin/apache2-vhost-update