Pārlūkot izejas kodu

Fix sudo SELinux settings

By settinf Defaults role/type parameters, sudo starts asking for
password when called as root. It isn't clear why this happens, but
rollback that change. Instead, set ROLE/TYPE just for the rule for the
'qubes' group, which already has NOPASSWD option.

Fixes 3bcc1c3 "“sudo” must remove SELinux restrictions"
Marek Marczykowski-Górecki 3 gadi atpakaļ
vecāks
revīzija
0fac1aa45c
1 mainītis faili ar 2 papildinājumiem un 2 dzēšanām
  1. 2 2
      passwordless-root/qubes.sudoers

+ 2 - 2
passwordless-root/qubes.sudoers

@@ -1,5 +1,5 @@
-Defaults role=unconfined_r, type=unconfined_t, !requiretty
-%qubes ALL=(ALL) NOPASSWD: ALL
+Defaults !requiretty
+%qubes ALL=(ALL) ROLE=unconfined_r TYPE=unconfined_t NOPASSWD: ALL
 
 # WTF?! Have you lost your mind?!
 #