acrogenesis
bafc9a1000
Managed policy dirs are enterprise trust roots, so they stay 0755 root:root. The menu path takes root for that one write through a sudoers glob of six hex digits, the same shape as omarchy-dns, and falls back to pkexec where the grant is not installed. Drop omarchy-browser-policy; a group member could plant any JSON, not just a colour.
3 lines
113 B
Bash
3 lines
113 B
Bash
source "$OMARCHY_PATH/install/helpers/browser-policy.sh"
|
|
browser_policy_setup_dir /etc/chromium/policies/managed
|