Defaults:limristem-mail !requiretty
# apt-get / apt are deliberately NOT listed here: they accept configuration
# options that execute arbitrary commands as root (APT::*::Pre-Invoke), which
# turns any compromise of the service account into an instant root shell.
# Package operations go through manage-packages.sh, which forwards no
# caller-supplied argument to apt.
limristem-mail ALL=(root) NOPASSWD: __BASE_DIR__/bin/manage-queue.sh, __BASE_DIR__/bin/manage-bans.sh, __BASE_DIR__/bin/manage-limits.sh, __BASE_DIR__/bin/manage-backups.sh, __BASE_DIR__/bin/manage-api-credentials.sh, __BASE_DIR__/bin/manage-firewall.sh, __BASE_DIR__/bin/manage-ssl.sh, __BASE_DIR__/bin/manage-settings.sh, __BASE_DIR__/bin/manage-rbl.sh, __BASE_DIR__/bin/manage-topology.sh, __BASE_DIR__/bin/manage-mailbox-import.sh, __BASE_DIR__/bin/manage-mailbox-fs.sh, __BASE_DIR__/bin/manage-webmail.sh, __BASE_DIR__/bin/manage-packages.sh
