Tighten omarchy-tzupdate sudoers to set-timezone subcommand only
Mirrors the upstream tightening in install/config/timezones.sh (which this etc-overrides file replaced): scope the wheel passwordless rule to 'timedatectl set-timezone *' instead of the whole timedatectl, so the rule can't be used to flip other system clock settings. Adopted while rebasing onto current origin/omarchy-shell.
This commit is contained in:
@@ -1 +1 @@
|
||||
%wheel ALL=(root) NOPASSWD: /usr/bin/tzupdate, /usr/bin/timedatectl
|
||||
%wheel ALL=(root) NOPASSWD: /usr/bin/tzupdate, /usr/bin/timedatectl set-timezone *
|
||||
|
||||
Reference in New Issue
Block a user