plus3it/amigen7

[Feature Request] Ensure Default-User Has Appropriate Sudoers Mapping

ferricoxide opened this issue · 0 comments

Is your feature request related to a problem? Please describe.

With the merging of fixes for #120 via PR #121, sudo behavior for the default-user becomes sub-optimal: users currently have to specifically request an SELinux role and type to get a useful permissions-set when elevating privileges. Casual sudo users won't understand the need for this and will complain about permission-errors when elevating privileges.

Describe the solution you'd like

Ensure that the default-user's sudoers mapping contains an appropriate privilege-elevation rights-mapping. Something like:

TYPE=sysadm_t ROLE=sysadm_r 

Or (less optimally):

TYPE=unconfined_t ROLE=unconfined_r 

Added to the cloud.cfg stanza for the default-user is recommended.

Describe alternatives you've considered

Additional context