core-agent-linux/debian/qubes-core-agent-passwordless-root.install

etc/polkit-1/localauthority/50-local.d/qubes-allow-all.pkla
etc/polkit-1/rules.d/00-qubes-allow-all.rules
etc/sudoers.d/qubes
usr/share/pam-configs/su.qubes
deb,rpm: split passwordless root access configs into separate package Make passwordless root access optional - ease integration qrexec authorization for sudo. QubesOS/qubes-issues#2695 2017-05-31 21:18:34 +02:00			`etc/polkit-1/localauthority/50-local.d/qubes-allow-all.pkla`
			`etc/polkit-1/rules.d/00-qubes-allow-all.rules`
			`etc/sudoers.d/qubes`
Use pam-configs to override Debian PAM config Instead of the old workaround that replaces the whole PAM config, use Debian's framework (pam-configs) to add a rule for su. Enable it for users in qubes group only. PAM Config framework documentation: https://wiki.ubuntu.com/PAMConfigFrameworkSpec Issue: QubesOS/qubes-issues#5799 Original PR this change is based on: QubesOS/qubes-core-agent-linux#171 2020-05-07 14:10:04 +02:00			`usr/share/pam-configs/su.qubes`