diff options
| author | John Klug <john.klug@multitech.com> | 2017-04-20 11:26:50 -0500 |
|---|---|---|
| committer | John Klug <john.klug@multitech.com> | 2017-05-23 15:22:10 -0500 |
| commit | df5312a5710020377380fd4e5b0e971366edc319 (patch) | |
| tree | 08d029cce6620cd6932acca1df776f187bc7c1bc /recipes-extended/sudo | |
| parent | 0641240a3fe5f3dd0856c9a24aa1b13e98c56e59 (diff) | |
| download | meta-mlinux-df5312a5710020377380fd4e5b0e971366edc319.tar.gz meta-mlinux-df5312a5710020377380fd4e5b0e971366edc319.tar.bz2 meta-mlinux-df5312a5710020377380fd4e5b0e971366edc319.zip | |
Add sudo so root password can be eliminated eventually
Diffstat (limited to 'recipes-extended/sudo')
| -rw-r--r-- | recipes-extended/sudo/sudo/privacy | 1 | ||||
| -rw-r--r-- | recipes-extended/sudo/sudo/sudoers.patch | 21 | ||||
| -rw-r--r-- | recipes-extended/sudo/sudo_%.bbappend | 12 |
3 files changed, 34 insertions, 0 deletions
diff --git a/recipes-extended/sudo/sudo/privacy b/recipes-extended/sudo/sudo/privacy new file mode 100644 index 0000000..7c03615 --- /dev/null +++ b/recipes-extended/sudo/sudo/privacy @@ -0,0 +1 @@ +Defaults lecture = never diff --git a/recipes-extended/sudo/sudo/sudoers.patch b/recipes-extended/sudo/sudo/sudoers.patch new file mode 100644 index 0000000..aed0f10 --- /dev/null +++ b/recipes-extended/sudo/sudo/sudoers.patch @@ -0,0 +1,21 @@ +diff -uprN old/plugins/sudoers/sudoers.in new/plugins/sudoers/sudoers.in +--- old/plugins/sudoers/sudoers.in 2015-10-31 18:34:59.000000000 -0500 ++++ new/plugins/sudoers/sudoers.in 2017-04-20 10:32:19.530931283 -0500 +@@ -57,7 +57,7 @@ + # Defaults env_keep += "XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER" + ## + ## Uncomment to use a hard-coded PATH instead of the user's to find commands +-# Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" ++Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" + ## + ## Uncomment to send mail if the user does not enter the correct password. + # Defaults mail_badpass +@@ -85,7 +85,7 @@ root ALL=(ALL) ALL + # %wheel ALL=(ALL) NOPASSWD: ALL + + ## Uncomment to allow members of group sudo to execute any command +-# %sudo ALL=(ALL) ALL ++%sudo ALL=(ALL) ALL + + ## Uncomment to allow any user to run sudo if they know the password + ## of the user they are running the command as (root by default). diff --git a/recipes-extended/sudo/sudo_%.bbappend b/recipes-extended/sudo/sudo_%.bbappend new file mode 100644 index 0000000..a1e4b04 --- /dev/null +++ b/recipes-extended/sudo/sudo_%.bbappend @@ -0,0 +1,12 @@ +SRC_URI += "file://sudoers.patch \ + file://privacy" + +FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}:" + + +CONFFILES_${PN} += "${sysconfdir}/sudoers.d/privacy" + +do_install_append() { + install -D -m 644 ${WORKDIR}/privacy ${D}/${sysconfdir}/sudoers.d +} + |