Browse Source

“sudo” must remove SELinux restrictions

Otherwise, if “user” has the SELinux user “staff_u”, the user will
typically need to write “sudo -r unconfined_r -t unconfined_t”, which is
annoying.  If SELinux is disabled, these fields are ignored.
Demi Marie Obenour 3 years ago
parent
commit
3bcc1c37ce
1 changed files with 1 additions and 1 deletions
  1. 1 1
      passwordless-root/qubes.sudoers

+ 1 - 1
passwordless-root/qubes.sudoers

@@ -1,4 +1,4 @@
-Defaults !requiretty
+Defaults role=unconfined_r, type=unconfined_t, !requiretty
 %qubes ALL=(ALL) NOPASSWD: ALL
 
 # WTF?! Have you lost your mind?!