# ButtonTask: allow the unprivileged web configurator to run only the three
# tightly-scoped helper scripts as root, without a password.
#
# Install:
#   sudo install -m 0440 buttontask.sudoers /etc/sudoers.d/buttontask
#   sudo visudo -cf /etc/sudoers.d/buttontask   # validate
#
# The scripts themselves must be root-owned and not writable by others:
#   sudo chown root:root /opt/buttontask/scripts/bt-*
#   sudo chmod 0755 /opt/buttontask/scripts/bt-*

buttontask ALL=(root) NOPASSWD: /opt/buttontask/scripts/bt-netconfig, /opt/buttontask/scripts/bt-update, /opt/buttontask/scripts/bt-service