Add sudo entries for new nm-web, contributors, contributors-web users

[mirror/dsa-puppet.git] / modules / sudo / files / sudoers

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index 5fb6091..6c9a72e 100644 (file)
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -33,13 +33,12 @@ Host_Alias  FTPHOSTS        = fasolo
 Host_Alias     ZIVITHOSTS      = zelenka, zandonai
 Host_Alias     AACRAIDHOSTS    = pettersson
 Host_Alias     MEGARAIDHOSTS   = sibelius
-Host_Alias     DELLHOSTS       = schumann, wieck, manda-node03, manda-node04, schmelzer, smit
+Host_Alias     DELLHOSTS       = schumann, wieck, manda-node03, manda-node04, schmelzer, smit, new-klecker
 Host_Alias     LISTHOSTS       = bendel
 Host_Alias     BUILDD_MASTER   = wuiet
 Host_Alias     PORTERBOXES     = abel, amdahl, barriere, eller, harris, minkus, plummer, zelenka
 Host_Alias     PIUPARTS_SLAVE_HOSTS    = piu-slave-bm-a, piu-slave-ubc-01
 Host_Alias     MQ_HOSTS        = rainier, rapoport
-Host_Alias     JENKINSHOSTS    = jerea
 
 # Cmnd alias specification
 
@@ -92,9 +91,6 @@ nagios                MEGARAIDHOSTS=(ALL)     NOPASSWD: /usr/local/bin/megarc -AllAdpInfo -nolog,
 nagios         DELLHOSTS=(ALL)         NOPASSWD: /usr/lib/nagios/plugins/dsa-check-openmanage ""
 nagios         DELLHOSTS=(ALL)         NOPASSWD: /usr/lib/nagios/plugins/dsa-check-openmanage -b bp=0
 nagios         DELLHOSTS=(ALL)         NOPASSWD: /usr/lib/nagios/plugins/dsa-check-openmanage -b bp=0 -b bat_charge=0\:0
-# other nagios things
-nagios         backuphost=(debbackup)  NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg ""
-nagios         storace=(debbackup)     NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg ""
 
 # groups and their role accounts
 %alioth-archive        ALL=(alioth-archive)    ALL
@@ -106,6 +102,7 @@ nagios              storace=(debbackup)     NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg
 %btslink       ALL=(btslink)   ALL
 %buildd                ALL=(buildd)    ALL
 %codesearch    ALL=(codesearch)        ALL
+%community     ALL=(community) ALL
 %d-i           ALL=(d-i)       ALL
 %dde           ALL=(dde)       ALL
 %ddtp          ALL=(ddtp)      ALL
@@ -150,7 +147,6 @@ git         godard=(salsa-webhook)  NOPASSWD: ALL
 git            godard=(salsa-pages)    NOPASSWD: ALL
 %keyring       ALL=(keyring)   ALL
 %keyring       kaufmann=(root)         NOPASSWD: /usr/sbin/service bind9 reload
-%jenkins-adm   ALL=(jenkins-adm)       ALL
 %lintian       ALL=(lintian)   ALL
 %listweb       ALL=(listweb)   ALL
 %list          LISTHOSTS=(list)        ALL
@@ -160,6 +156,9 @@ git         godard=(salsa-pages)    NOPASSWD: ALL
 %mirroradm     ALL=(archvsync) ALL
 %mirroradm     melartin=(mirroradm)    ALL
 %nm            ALL=(nm)        ALL
+%nm            ALL=(nm-web)    ALL
+%contributors  ALL=(contributors)      ALL
+%contributors  ALL=(contributors-web)  ALL
 %patch-tracker ALL=(patch-tracker)     ALL
 %pet-devel     ALL=(pet-devel) ALL
 %piuparts      ALL=(piupartsm) ALL
@@ -242,7 +241,6 @@ pabs                dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component time
 %debconfstatic dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component debconf16.debconf.org
 %debconfstatic dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component debconf17.debconf.org
 %debconfstatic dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component debconf18.debconf.org
-%debconfstatic dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component debconf19.debconf.org
 %debconfstatic dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component es.debconf.org
 %debconfstatic dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component fr.debconf.org
 %debconfstatic dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component miniconf10.debconf.org
@@ -261,6 +259,8 @@ letsencrypt denis=(dnsadm)                  NOPASSWD: /srv/dns.debian.org/bin/update
 # wbadm can update all buildd* users' keys on buildd.d.o
 %wbadm         BUILDD_MASTER=(wb-buildd)       ALL
 %wbadm         BUILDD_MASTER=(root)            /usr/local/bin/update-buildd-sshkeys
+# wbadm can impersonate the wbadm-web user
+%wbadm         BUILDD_MASTER=(wbadm-web)       ALL
 # mirror push
 dak            FTPHOSTS,SECHOSTS=(archvsync)   NOPASSWD:/home/archvsync/runmirrors, /home/archvsync/bin/runmirrors
 # archvsync triggers snapshot
@@ -297,9 +297,6 @@ nagiosadm   tchaikovsky=(root)              NOPASSWD: /usr/sbin/service icinga reload
 # voip stuff
 %debvoip       VOIPHOSTS=(root)        /usr/sbin/service resiprocate-turn-server restart, /usr/sbin/service repro restart
 %debvoip       VOIPHOSTS=(root)        /usr/sbin/service prosody restart, /usr/sbin/service prosody reload, /usr/sbin/service prosody stop, /usr/sbin/service prosody start
-# jenkins
-%jenkins-adm   JENKINSHOSTS=(jenkins)  ALL
-%jenkins-adm   JENKINSHOSTS=(root)     /usr/sbin/service jenkins restart, /usr/sbin/service jenkins reload, /usr/sbin/service jenkins stop, /usr/sbin/service jenkins start
 # snapshot can reload apache to get the wsgi reloaded
 snapshot       lw07,sallinen=(root)    NOPASSWD: /usr/sbin/service apache2 reload
 
@@ -309,5 +306,4 @@ snapshot    lw07,sallinen=(root)    NOPASSWD: /usr/sbin/service apache2 reload
 # ports stuff
 mini-dak       porta=(archvsync)       NOPASSWD: /home/archvsync/signal_ports
 
-# temporary, for debugging
-thijs          klecker=(root)          /usr/sbin/tcpdump
+#includedir /etc/sudoers.d