diff --git a/sudo-rs.yaml b/sudo-rs.yaml index 80e8954cca6..083cb3373cc 100644 --- a/sudo-rs.yaml +++ b/sudo-rs.yaml @@ -1,7 +1,7 @@ package: name: sudo-rs version: 0.2.1 - epoch: 0 + epoch: 1 description: A memory safe implementation of sudo and su. copyright: - license: MIT @@ -36,6 +36,20 @@ pipeline: chmod u+s ${{targets.destdir}}/usr/bin/sudo chmod u+s ${{targets.destdir}}/usr/bin/su + # Establish a minimal working configuration + mkdir -p ${{targets.destdir}}/etc/pam.d/ + cat <${{targets.destdir}}/etc/pam.d/sudo + auth required pam_env.so + auth sufficient pam_unix.so + account required pam_unix.so + session required pam_limits.so + session required pam_unix.so + EOF + cp ${{targets.destdir}}/etc/pam.d/sudo ${{targets.destdir}}/etc/pam.d/sudo-i + chmod 644 ${{targets.destdir}}/etc/pam.d/sudo* + echo "root ALL = (ALL:ALL) NOPASSWD:ALL" > ${{targets.destdir}}/etc/sudoers + chmod 440 ${{targets.destdir}}/etc/sudoers + - uses: strip update: