# sudoers file # Host alias specification Host_Alias DNS=ns1, ns2 Host_Alias MAIL=mail1, mail2, mail3 Host_Alias WEB=web1 # User alias specification User_Alias NOC=%noc, alvin, raffi User_Alias CALLCENTER=%callcenter # Cmnd alias specification Cmnd_Alias READLOG=/usr/bin/less /var/log/mail.log, \ /usr/bin/less /var/log/apache/access.log, \ /usr/bin/less /var/log/apache/error.log, \ /usr/bin/zless /var/log/mail* Cmnd_Alias USERMOD=/usr/sbin/adduser [a-zA-Z0-9]*,\ /usr/sbin/userdel -r [a-zA-Z0-9]*,\ /usr/bin/passwd [a-zA-Z0-9]*, \ /usr/bin/chfn [a-zA-Z0-9]* Cmnd_Alias RESTART=/etc/init.d/named restart Cmnd_Alias MODIFY=/usr/bin/pico access.txt, \ /usr/bin/pico /etc/mail/access.txt, \ /usr/bin/vi access.txt, \ /usr/bin/vi /etc/mail/access.txt, \ /usr/bin/make access Cmnd_Alias ROOTMOD=/usr/bin/passwd root, \ /usr/sbin/userdel root, \ /usr/sbin/userdel -r root,\ /usr/sbin/adduser root # User privilege specification # NOC may execute RESTART commands on host DNS NOC DNS=RESTART # NOC may execute READLOG, USERMOD, and MODIFY commands on hosts # MAIL and WEB NOC MAIL, WEB=READLOG, USERMOD, MODIFY # NOC may NOT execute ROOTMOD commands on DNS,MAIL, or WEB NOC DNS, MAIL, WEB=!ROOTMOD # CALLCENTER may execute READLOG commands on MAIL and WEB CALLCENTER MAIL, WEB=READLOG # end sudoers file