From c80a1c18ac660545cec3833c2ac462730cfa8641 Mon Sep 17 00:00:00 2001
From: Joanna Rutkowska <joanna@invisiblethingslab.com>
Date: Tue, 5 Apr 2011 16:04:09 +0200
Subject: [PATCH] Add qubes group to suders that can do everything

(The file in /etc/sudoers.d/ cannot have '.' in its name!)
---
 dom0/qubes.sudoers      | 1 +
 rpm_spec/core-dom0.spec | 4 ++++
 2 files changed, 5 insertions(+)
 create mode 100644 dom0/qubes.sudoers

diff --git a/dom0/qubes.sudoers b/dom0/qubes.sudoers
new file mode 100644
index 00000000..726b0974
--- /dev/null
+++ b/dom0/qubes.sudoers
@@ -0,0 +1 @@
+%qubes ALL=(ALL) NOPASSWD: ALL
diff --git a/rpm_spec/core-dom0.spec b/rpm_spec/core-dom0.spec
index 6ead13ef..42c61177 100644
--- a/rpm_spec/core-dom0.spec
+++ b/rpm_spec/core-dom0.spec
@@ -131,6 +131,9 @@ mkdir -p $RPM_BUILD_ROOT/var/run/qubes
 install -D ../vchan/libvchan.so $RPM_BUILD_ROOT/%{_libdir}/libvchan.so
 install -D ../u2mfn/libu2mfn.so $RPM_BUILD_ROOT/%{_libdir}/libu2mfn.so
 
+install -d $RPM_BUILD_ROOT/etc/sudoers.d
+install -m 0440 qubes.sudoers $RPM_BUILD_ROOT/etc/sudoers.d/qubes
+
 %post
 
 # Create NetworkManager configuration if we do not have it
@@ -275,3 +278,4 @@ fi
 %attr(770,root,qubes) %dir /var/run/qubes
 %{_libdir}/libvchan.so
 %{_libdir}/libu2mfn.so
+/etc/sudoers.d/qubes