# Allow www user to run the vacation command as a user, but not as root
User_Alias WWWRUN = wwwrun,www-data
Runas_Alias NOTROOT = ALL,!root
Cmnd_Alias VACATION=/usr/bin/vacation *
Cmnd_Alias RM_FORWARD=/bin/rm -f /home/*/.forward
Cmnd_Alias RM_FORWARD_EXT=/bin/rm -f /home/*/.forward+*
Cmnd_Alias TEST_FORWARD=@base_dir@/lib/test_readable.sh /home/*/.forward
Cmnd_Alias TEST_VACATION_MSG=@base_dir@/lib/test_readable.sh /home/*/.vacation.msg
Cmnd_Alias TEST_VACATION_DB=@base_dir@/lib/test_readable.sh /home/*/.vacation.db
Cmnd_Alias GET_FORWARD=/bin/cat /home/*/.forward
Cmnd_Alias GET_VACATION_MSG=/bin/cat /home/*/.vacation.msg
Cmnd_Alias PUT_FORWARD=@base_dir@/lib/write_to.sh /home/*/.forward
Cmnd_Alias PUT_FORWARD_EXT=@base_dir@/lib/write_to.sh /home/*/.forward+*
Cmnd_Alias PUT_VACATION_MSG=@base_dir@/lib/write_to.sh /home/*/.vacation.msg
WWWRUN ALL=(NOTROOT) NOPASSWD: VACATION
WWWRUN ALL=(NOTROOT) NOPASSWD: RM_FORWARD
WWWRUN ALL=(NOTROOT) NOPASSWD: RM_FORWARD_EXT
WWWRUN ALL=(NOTROOT) NOPASSWD: TEST_FORWARD
WWWRUN ALL=(NOTROOT) NOPASSWD: TEST_VACATION_MSG
WWWRUN ALL=(NOTROOT) NOPASSWD: TEST_VACATION_DB
WWWRUN ALL=(NOTROOT) NOPASSWD: GET_FORWARD
WWWRUN ALL=(NOTROOT) NOPASSWD: GET_VACATION_MSG
WWWRUN ALL=(NOTROOT) NOPASSWD: PUT_FORWARD
WWWRUN ALL=(NOTROOT) NOPASSWD: PUT_FORWARD_EXT
WWWRUN ALL=(NOTROOT) NOPASSWD: PUT_VACATION_MSG