## RHN specifics ##
Cmnd_Alias CONFIG_RHN = /usr/sbin/rhn-sat-restart-silent,\
                        /usr/bin/rhn-config-satellite.pl,\
                        /usr/bin/rhn-bootstrap,\
                        /usr/bin/rhn-ssl-tool,\
                        /sbin/service taskomatic restart,\
                        /usr/sbin/mgr-monitoring-ctl,\
                        /usr/bin/instance-flavor-check

# The CONFIG_RHN commands are required for reconfiguration of a
# running Red Hat Satellite.  They should be enabled for proper operation
# of the Red Hat Satellite.
tomcat  ALL=(root)      NOPASSWD:SETENV: CONFIG_RHN

# These two directives allow tomcat and apache to invoke CONFIG_RHN
# commands via sudo even without a real tty
Defaults:tomcat !requiretty

# These two commands allow tomcat and apache to check permissions of
# the minion bootstrap ssh-known_hosts file
tomcat  ALL=(root)      NOPASSWD: /usr/bin/ls -la /var/lib/salt/.ssh/known_hosts
