# $Header: /global/src/etc/cl-manage-scripts/patches/RCS/P-sudoers-targetpw,v 1.6 2025/03/21 15:19:26 mas90 Exp $
# patch-file matches : staff
# patch-file distmatches = Fedora|CentOS|Red.Hat.Enterprise.Linux|Ubuntu|Debian
# Process using /usr/bin/cl-patch-file unless matching the above
--- /etc/sudoers	2006-02-12 09:14:53.000000000 +0000
+++ /etc/sudoers	2006-04-29 21:33:32.000000000 +0100
@@ -30,2 +31,6 @@
 # %wheel	ALL=(ALL)	ALL
+# cl.cam.ac.uk - Note the order is important - the *LAST* match wins,
+# cl.cam.ac.uk - so to allow staff to be "users" as well, this comes FIRST.
+# cl.cam.ac.uk - allow members of group staff to run any cmd (using root pw)
+%sysadmin,%wheel,%staff ALL=(ALL) ALL
 
