# /etc/sudoers
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the man page for details on how to write a sudoers file.
#
# Host alias specification
# User alias specification
# Cmnd alias specification
Cmnd_Alias SU = /bin/su
Cmnd_Alias RNDC = /usr/sbin/rndc, !/usr/sbin/rndc stop, !/usr/sbin/rndc halt
Cmnd_Alias RM_ZONES = /bin/rm /var/cache/bind/hddg/*
# User privilege specification
root ALL=(ALL) ALL
ouradminusr ALL=ALL, !SU
# "webispuser" user can reload zones and such, but can't stop the server
webispuser ALL=RNDC, RM_ZONES, /etc/init.d/bind9 restart