Skip to content

added role-parents und role-staff to sudoers.de #84

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
highTowerSU wants to merge 11 commits into from
Closed

added role-parents und role-staff to sudoers.de #84

Changes from all commits
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
af83e25
add libpam-krb5 to package dependencies.
HappyBasher Oct 27, 2025
e96637b
add full path of linuxmuster-linuxclient7.
HappyBasher Oct 27, 2025
aa98701
add krb5 to pam configuration.
HappyBasher Oct 27, 2025
427f99a
extend krb5 configuration.
HappyBasher Oct 27, 2025
35dea4a
update nsswitch.conf.
HappyBasher Oct 27, 2025
04c84d9
change security to ads in smb.conf.
HappyBasher Oct 27, 2025
55b5017
update changelog.
HappyBasher Oct 27, 2025
ebabcfc
Merge pull request #81 from linuxmuster/trixie
dorianim Oct 30, 2025
240a9fb
Revert "Trixie"
HappyBasher Nov 1, 2025
db3cc9f
Merge pull request #82 from linuxmuster/revert-81-trixie
HappyBasher Nov 1, 2025
f7be82d
added role-parents und role-staff to sudoers.de
highTowerSU Nov 5, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions etc/sudoers.d/99-linuxmuster-linuxclient7
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,5 +4,7 @@
%examusers ALL=(root) NOPASSWD: /usr/share/linuxmuster-linuxclient7/scripts/sudoTools
%role-student ALL=(root) NOPASSWD: /usr/share/linuxmuster-linuxclient7/scripts/sudoTools
%role-teacher ALL=(root) NOPASSWD: /usr/share/linuxmuster-linuxclient7/scripts/sudoTools
%role-parents ALL=(root) NOPASSWD: /usr/share/linuxmuster-linuxclient7/scripts/sudoTools
%role-staff ALL=(root) NOPASSWD: /usr/share/linuxmuster-linuxclient7/scripts/sudoTools
Copy link
Member

@dorianim dorianim Nov 7, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe we should use the group domain users instead?

Copy link
Member

@kiarn kiarn Nov 8, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It would be simpler to use domain users, but this way we have a clear view of the access.
Adding a new line in sudoers and publish a new version is not a big deal if we add new roles in the future.

%role-schooladministrator ALL=(ALL:ALL) NOPASSWD: ALL
%role-globaladministrator ALL=(ALL:ALL) NOPASSWD: ALL