Number asdcontrol's sudoers policy and add it to the fast ring (#243)
* Use a numbered asdcontrol sudoers priority * Add asdcontrol to the fast ring
This commit is contained in:
@@ -1,3 +1,4 @@
|
||||
{
|
||||
"source": "local"
|
||||
"source": "local",
|
||||
"release_ring": "fast"
|
||||
}
|
||||
|
||||
@@ -16,7 +16,7 @@ source=(
|
||||
)
|
||||
sha256sums=(
|
||||
'3112a6d5fc51a204c96ef9d27187577c6efc80b952e37a77969efbd0124e81d3'
|
||||
'dff3a5ecbe77825b4ea82235d5fd8589832a0462108ab573140488ae54989d23'
|
||||
'70d6838f91cf4b5e51974b9b62b141924cec844a2e60de79607839584ede847f'
|
||||
)
|
||||
|
||||
build() {
|
||||
@@ -29,5 +29,5 @@ package() {
|
||||
|
||||
install -Dm755 asdcontrol "$pkgdir/usr/bin/asdcontrol"
|
||||
install -dm750 "$pkgdir/etc/sudoers.d"
|
||||
install -m440 "$srcdir/asdcontrol.sudoers" "$pkgdir/etc/sudoers.d/zz-asdcontrol"
|
||||
install -m440 "$srcdir/asdcontrol.sudoers" "$pkgdir/etc/sudoers.d/50-asdcontrol"
|
||||
}
|
||||
|
||||
@@ -1,4 +1,3 @@
|
||||
# Deny arbitrary asdcontrol arguments before allowing only the operations Omarchy uses.
|
||||
# Keep this filename late-sorting so it also overrides stale broader grants.
|
||||
ALL ALL=(ALL) !/usr/bin/asdcontrol
|
||||
%wheel ALL=(root) NOPASSWD: /usr/bin/asdcontrol ^--detect (/dev/(usb/)?hiddev[0-9]+)( /dev/(usb/)?hiddev[0-9]+)*$, /usr/bin/asdcontrol ^/dev/(usb/)?hiddev[0-9]+$, /usr/bin/asdcontrol ^/dev/(usb/)?hiddev[0-9]+ -- [+-]?[0-9]{1,3}%$
|
||||
|
||||
Reference in New Issue
Block a user