helloSystem / helloSystem/Utilities

Create Sudoers policy for preference App

Aperta
#175 20 commenti 0 reazioni 0 assegnatari Vedi su GitHub
Lingua principale
Python
Stelle
29
Fork
30
Metriche di merge delle PR
Nessuna PR unita negli ultimi 30g

Descrizione

Sudoers is not the best policy system but that is the default helloSystem one, And actually the only one.

We should start a fine tuning of sudoers policy.

It have two big part:
1)
The system default config -> Ultra important section if allow or not certain VAR to be maintain by parent and child during a sudo
Take a look on the /usr/local/etc/sudoers.conf file, That is the original configuration file. Every option have a commentary and a explanation.
Aat the end of it file the directory /usr/local/etv/sudoers.d/ is loaded for get policies.

2)
The system policy require less work, but we have ton consider each of our Application and creat a policy for each one.
Policies can be really power full, we can decide if a password is require , if the user is a Admin etc etc ....

I dont know really by where start:

- /usr/local/etc/sudoers.conf and /usr/local/etc/sudoers.d are normaly model file to be copied in to default sysconfig directory (/etc)
- We should track policy Application by application, and let ultra short place to security issue.
- Where store our sudoers policy ?
- What is teh process to add / update or remove a sudoers policy (By example for a new app)

PS: I dont know when and dont know how but we'll change the world ...

Guida per i contributori

Nessuna guida per i contributori indicizzata per questo repository

Direzione di ricerca

Start by reading /usr/local/etc/sudoers.conf and checking the policies loaded from /usr/local/etc/sudoers.d/. Then determine where helloSystem should store application-specific policies and how policies are added, updated, and removed; done requires an agreed sudoers policy for the preference app and a defined maintenance process.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Valutazione

Ambito
operating-systems, security
Tipo di issue
Funzionalità
Difficoltà
5/5
Tempo stimato
Più di una settimana
Stato di attività
Ferma
Chiarezza
Da chiarire
Idoneità per principianti
25/100

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.