server/files/etc/sudoers in pauldowman-ec2onrails-0.9.10 vs server/files/etc/sudoers in pauldowman-ec2onrails-0.9.10.0

- old
+ new

@@ -1,30 +1,60 @@ -sudoers.full_access \ No newline at end of file +# /etc/sudoers +# +# This file MUST be edited with the 'visudo' command as root. +# +# See the man page for details on how to write a sudoers file. +# Host alias specification + +Defaults !lecture,tty_tickets,!fqdn + +root ALL=(ALL) ALL + +# The 'app' user can only run /usr/bin/god using sudo, and will not be +# prompted for a password +app ALL = NOPASSWD: /usr/bin/god + +# Users in the rootequiv group can run any command using sudo, without being +# prompted for a password. +# By default there are nousers in this group, but some EC2 on Rails Capistrano +# tasks (which log in as the 'app' user) require the ability to use sudo so +# they temporarily place the app user into this group for the duration of the +# task. +%rootequiv ALL=(ALL) NOPASSWD: ALL + +# Users in the admin group can run any command via sudo, but will be +# prompted for their password. +# By default there are no users in this group, but if you add named +# administrator accounts, add them to this group. (You might do this if you +# have multiple sysadmins and you want to use separate user accounts rather +# than have multiple people sharing a root account.) +%admin ALL=(ALL) ALL +