Stephen Touset
Stephen Touset
*Very* important that users can't just `sudo -u $user /path/to/approval/script` to bypass this. We may need to have two scripts, one for the authenticated side and one for the unauthenticated...
Yep! I just haven't done the work, but I would love for that to be added.
I'm open to the plugin itself being packaged for distributions, but some care needs to be done when doing this. To enable it for real, you *really* need to configure...
I don't have time for that at the moment, but I'll leave this issue open since it's something I'd like to do. PRs welcome. :)
Thanks!
@nbraud Did you ever get a chance to package this for Debian?
As far as I'm aware, every mention of the project is `sudo_pair`. If there's somewhere it's not, please let me know.
I would name this `groups_exempted`, since `gids_exempted` is a `Vec`. In the options parser, you could just do `groupname => gid` lookups and add them to `gids_exempted`. If a groupname...
Is this still something you guys are interested in? I have a PR open, but I'd like feedback from you on use before I merge it.
Seconded 👍