# MotorSignal Operations Action Execution Sudoers Fragment
# Place at: /etc/sudoers.d/motorsignal-ops-actions
# Ownership: root:root, Mode: 0440

# Permit motorsignal service account to execute ONLY the canonical helper script
motorsignal ALL=(root) NOPASSWD: /opt/motorsignal/current/backend/scripts/ops-action-helper.sh