From: Ansgar Burchardt Date: Sun, 26 May 2013 20:17:19 +0000 (+0200) Subject: sudoers: ordering for dak-unpriv user X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=46a3ce0a4d68c0354e801610c36a950c3e798f89;p=mirror%2Fdsa-puppet.git sudoers: ordering for dak-unpriv user The dak user is allowed to run any command as dak-unpriv however it cannot pass environment variables to lintian as the last entry matched counts. Signed-off-by: Peter Palfrader --- diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers index 51e3a0c0f..196bb4a87 100644 --- a/modules/sudo/files/sudoers +++ b/modules/sudo/files/sudoers @@ -118,8 +118,8 @@ nagios beethoven=(debbackup) NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backup %gobby gombert=(gobby) ALL # the dak user gets to run stuff as dak-unpriv (for things like lintian checks) -dak ALL=(dak-unpriv) NOPASSWD: ALL %ftptrainee FTPHOSTS=(dak-unpriv) NOPASSWD: /usr/bin/lintian +dak ALL=(dak-unpriv) NOPASSWD: ALL # some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost %apachectrl ALL=(root) /usr/sbin/apache2-vhost-update