mirror of
https://github.com/freedombox/FreedomBox.git
synced 2026-01-28 08:03:36 +00:00
6f5410931e
Currently privileged actions use stdout for returning the results. If any of the sub-processes accidentally output to stdout, decoding errors occur. Prevent this by opening a pipe to the privileged action and returning the output in that pipe. Tests: - Run unit tests - Functional tests for other apps pass Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org> Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
14 lines
388 B
Plaintext
14 lines
388 B
Plaintext
#
|
|
# Allow plinth user to run plinth action scripts with superuser privileges
|
|
# without needing a password.
|
|
#
|
|
Cmnd_Alias FREEDOMBOX_ACTION = /usr/share/plinth/actions/actions
|
|
Defaults!FREEDOMBOX_ACTION closefrom_override
|
|
plinth ALL=(ALL:ALL) NOPASSWD:FREEDOMBOX_ACTION
|
|
|
|
#
|
|
# On FreedomBox, allow all users in the 'admin' LDAP group to execute
|
|
# commands as root.
|
|
#
|
|
%admin ALL=(root) ALL
|