aurto icon indicating copy to clipboard operation
aurto copied to clipboard

sudo still asks for password

Open bjo81 opened this issue 2 years ago • 2 comments

As I use the wheelgroup for myself, I changed /etc/sudoers.d/50_aurto_passwordless to:

build ALL=(ALL) NOPASSWD: /usr/bin/arch-nspawn
build ALL=(ALL) NOPASSWD: /usr/bin/pacsync aurto
build ALL=(ALL) NOPASSWD:SETENV: /usr/bin/makechrootpkg

But something still want's to use another command then in the config?

[1/2] env -C /data/build/.cache/aurutils/sync/aurutils '--' 'aur' 'build' '--...to' '--root' '/var/cache/pacman/aurto' && date --rfc-3339=ns > aurutils.stamp
Running aur chroot --create --update --pacman-conf /etc/aurto/pacman-chroot.conf --makepkg-conf /etc/aurto/makepkg-chroot.conf

We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these three things:

    #1) Respect the privacy of others.
    #2) Think before you type.
    #3) With great power comes great responsibility.

[sudo] password for build: 

bjo81 avatar May 29 '22 10:05 bjo81

Likely from the sudo install call https://github.com/AladW/aurutils/blob/master/lib/aur-chroot#L143

AladW avatar Jul 10 '22 13:07 AladW

I have the same problem for a couple of months now.

I had some time, the file /etc/sudoers.d/50_aurto_passwordless is correct, but with the new sudo package changes there is another file.../etc/sudoers.d/99-sudo-group with the contents of:

%sudo ALL=(ALL:ALL) ALL 

This seems to make sudo ignore all configs regarding %wheel.

This is my id is someone smarter than me can tell why is this happening. What I know:

  • the sudo-group file is read last because of the 99.
  • It applies because I'm in the sudo group and the wheel group

My ID: uid=1000(gr3q) gid=1000(gr3q) groups=1000(gr3q),962(autologin),974(docker),994(disk),998(wheel),1001(sudo)

Gr3q avatar Sep 06 '23 07:09 Gr3q