helloSystem / helloSystem/Utilities

Create Sudoers policy for preference App

Open
#175 20 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
29
Forks
30
PR merge metrics
No merged PRs in 30d

Description

Sudoers is not the best policy system but that is the default helloSystem one, And actually the only one.

We should start a fine tuning of sudoers policy.

It have two big part:
1)
The system default config -> Ultra important section if allow or not certain VAR to be maintain by parent and child during a sudo
Take a look on the /usr/local/etc/sudoers.conf file, That is the original configuration file. Every option have a commentary and a explanation.
Aat the end of it file the directory /usr/local/etv/sudoers.d/ is loaded for get policies.

2)
The system policy require less work, but we have ton consider each of our Application and creat a policy for each one.
Policies can be really power full, we can decide if a password is require , if the user is a Admin etc etc ....

I dont know really by where start:

- /usr/local/etc/sudoers.conf and /usr/local/etc/sudoers.d are normaly model file to be copied in to default sysconfig directory (/etc)
- We should track policy Application by application, and let ultra short place to security issue.
- Where store our sudoers policy ?
- What is teh process to add / update or remove a sudoers policy (By example for a new app)

PS: I dont know when and dont know how but we'll change the world ...

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.