Join GitHub today
GitHub is home to over 50 million developers working together to host and review code, manage projects, and build software together.Sign up
nixos/sudo: default rule should be first #87579
In /etc/sudoers, the last-matched rule will override all
Motivation for this change
Addresses #87555. I'll backport this to 20.03 after this gets merged (or whoever merges this can take care of that for me; I don't mind either way, but that might be easier than waiting for me to follow up).
If somebody more familiar with
Sorry it took me so long to get back to this (and even sorrier that it was just to say "I can't do that").
In /etc/sudoers, the last-matched rule will override all previously-matched rules. Thus, make the default rule show up first (but still allow some wiggle room for a user to `mkBefore` it), before any user-defined rules.