Ansible_workstation/files/sudoers

13 lines
378 B
Plaintext

root ALL=(ALL) ALL
%sudo ALL=(ALL) ALL
# Allow the build user access to pacman. This user can't be accessed without
# being in the sudo group, anyway.
makepkg ALL=NOPASSWD: /usr/bin/pacman *
# If you managed to run malicious code as my user, I'm already fucked, so err
# on the side of usability.
{% for user in deploy_users %}
{{ user }} ALL=(ALL) NOPASSWD:ALL
{% endfor %}