Otherwise, if “user” has the SELinux user “staff_u”, the user will typically need to write “sudo -r unconfined_r -t unconfined_t”, which is annoying. If SELinux is disabled, these fields are ignored.
@@ -1,4 +1,4 @@
-Defaults !requiretty
+Defaults role=unconfined_r, type=unconfined_t, !requiretty
%qubes ALL=(ALL) NOPASSWD: ALL
# WTF?! Have you lost your mind?!