# /etc/sudoers
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the man page for details on how to write a sudoers file.
#

# Host alias specification

# User alias specification

# Cmnd alias specification
Cmnd_Alias      SU = /bin/su
Cmnd_Alias      RNDC = /usr/sbin/rndc, !/usr/sbin/rndc stop, !/usr/sbin/rndc halt
Cmnd_Alias      RM_ZONES = /bin/rm /var/cache/bind/hddg/*

# User privilege specification
root            ALL=(ALL) ALL
ouradminusr     ALL=ALL, !SU
# "webispuser" user can reload zones and such, but can't stop the server
webispuser      ALL=RNDC, RM_ZONES, /etc/init.d/bind9 restart