root ALL=(ALL) ALL %sudo ALL=(ALL) ALL # Allow the build user access to pacman. This user can't be accessed without # being in the sudo group, anyway. makepkg ALL=NOPASSWD: /usr/bin/pacman * # # If you managed to run malicious code as my user, I'm already fucked, so err # # on the side of usability. # {% for user in deploy_users %} # {{ user }} ALL=(ALL) NOPASSWD:ALL # {% endfor %}