Ryan Hughes
cf459ba752
Fail closed when passwordless sudo expiry cannot arm
(cherry picked from commit a87d396f01)
(cherry picked from commit 88ba230e6affefe83899ea5cda228311c73b924b)
6 lines
360 B
Plaintext
6 lines
360 B
Plaintext
# omarchy-sudo-passwordless writes /etc/sudoers.d/99-omarchy-nopasswd-<user> and
|
|
# arms a transient systemd-run timer to remove it again. Transient units do not
|
|
# survive a reboot, so remove any remaining grant during early boot. Boot-only
|
|
# (r!) ensures a later systemd-tmpfiles --remove cannot cut a live grant short.
|
|
r! /etc/sudoers.d/99-omarchy-nopasswd-*
|