Sync upstream omarchy 0ae16948
#2
@@ -1 +1 @@
|
|||||||
%wheel ALL=(root) NOPASSWD: /usr/bin/timedatectl set-timezone *
|
%wheel ALL=(root) NOPASSWD: /usr/bin/timedatectl ^set-timezone [A-Za-z0-9_+][A-Za-z0-9_+.-]*(/[A-Za-z0-9_+][A-Za-z0-9_+.-]*)*$
|
||||||
|
|||||||
@@ -7,9 +7,12 @@ source "$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)/base-test.sh"
|
|||||||
timezone_menu="$ROOT/bin/omarchy-menu-timezone"
|
timezone_menu="$ROOT/bin/omarchy-menu-timezone"
|
||||||
sudoers_file="$ROOT/etc/sudoers.d/omarchy-tzupdate"
|
sudoers_file="$ROOT/etc/sudoers.d/omarchy-tzupdate"
|
||||||
|
|
||||||
grep -F '%wheel ALL=(root) NOPASSWD: /usr/bin/timedatectl set-timezone *' "$sudoers_file" >/dev/null ||
|
grep -F '%wheel ALL=(root) NOPASSWD: /usr/bin/timedatectl ^set-timezone [A-Za-z0-9_+][A-Za-z0-9_+.-]*(/[A-Za-z0-9_+][A-Za-z0-9_+.-]*)*$' "$sudoers_file" >/dev/null ||
|
||||||
fail "timezone sudoers rule allows passwordless timedatectl timezone changes"
|
fail "timezone sudoers rule allows passwordless timedatectl timezone changes"
|
||||||
|
|
||||||
|
! grep -F 'set-timezone *' "$sudoers_file" >/dev/null ||
|
||||||
|
fail "timezone sudoers rule uses a bare wildcard that admits extra arguments like -H and -M"
|
||||||
|
|
||||||
! grep -F 'tzupdate' "$sudoers_file" >/dev/null ||
|
! grep -F 'tzupdate' "$sudoers_file" >/dev/null ||
|
||||||
fail "timezone sudoers rule does not grant passwordless tzupdate"
|
fail "timezone sudoers rule does not grant passwordless tzupdate"
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user