sudo allowances

[brianjmurrell]

I'm not sure that the existing sudo allowances should be allowed by default. Perhaps they should be approved by the admin.

The restart permission I'm not so worried about but the mount permission seems a bit sketchy.

I realise we are inheriting this from Emby, but perhaps we should be more cautious. I, for example, have no use or interest in mounting ISO images and would rather not give mount permissions to something that doesn't need it.

[Wuerfelbecher]

I agree with you on every point you made, since i mostly copied the official debian package, which i even did wrong since i forgot to add the -restartpath option to the daemon, so the policy was unused.

I updated the .spec release to print to:

• print a message after installation
• moved the sudo policy to /usr/share/jellyfin/jellyfin-sudoers
• /etc/sudoers.d/jellyfin should be removed by RPM (due to spec bump)
• commented out the mount part of the policy

Thank you very much for pointing this out!

[brianjmurrell]

Looks good. I really like the idea of using systemd's to detect when Jellyfin wants to restart itself.

Nice job getting this on RH distros by the way. Really appreciate that.