Template for rhel8 is mising

Question

Template for rhel8 is mising

tuxmaster5000 opened this issue 4 years ago · 10 comments

To use it for rhel8 an new template is needed.

Answer 1 · 2020-10-08T14:56:43.000Z

Just in case it helps you -- you can temporarily work around this by putting this in hiera:

# RHEL 8 isn't directly supported by sudo module, use RHEL 7 one as it's compatible.
sudo::content: 'sudo/sudoers.rhel7.erb'

Answer 2 · 2020-10-09T11:00:04.000Z

As an workaround I have patched it, when it helps, I can create an PR for it.

Answer 3 · 2020-10-22T16:16:24.000Z

Are the config files of RHEL7 and RHEL8 the same?

Answer 4 · 2020-10-22T17:05:16.000Z

All I can truly confirm at the moment is that the rhel7 one works fine -- I don't know if it's precisely the same as I basically replace it immediately via puppet during install. =)

…

On Thu, Oct 22, 2020 at 12:16 PM Steffen Zieger ***@***.***> wrote: Are the config files of RHEL7 and RHEL8 the same? — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#255 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAFVBNCHKI3FKJK6O64BLCDSMBLG3ANCNFSM4RETJWQQ> .

-- Daniel Henninger <daniel@vorpalcloud.org>

Answer 5 · 2020-10-23T05:24:22.000Z

Here the diff of the RHEL 7 and 8 default config:

@@ -51,8 +51,8 @@
 
 # Defaults specification
 
-# Refuse to run if unable to disable echo on the tty. This setting should also be
-# changed in order to be able to use sudo without a tty. See requiretty above.
+#
+# Refuse to run if unable to disable echo on the tty.
 #
 Defaults   !visiblepw
 
@@ -64,6 +64,15 @@
 # env_reset is disabled or HOME is present in the env_keep list.
 #
 Defaults    always_set_home
+Defaults    match_group_by_gid
+
+# Prior to version 1.8.15, groups listed in sudoers that were not
+# found in the system group database were passed to the group
+# plugin, if any. Starting with 1.8.15, only groups of the form
+# %:group are resolved via the group plugin by default.
+# We enable always_query_group_plugin to restore old behavior.
+# Disable this option for new behavior.
+Defaults    always_query_group_plugin
 
 Defaults    env_reset
 Defaults    env_keep =  "COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS"

The real change is, that this two lines are added:
Defaults match_group_by_gid
Defaults always_query_group_plugin

Answer 6 · 2021-06-23T05:44:18.000Z

There seems to exist #247, albeit i am a bit confused about the timeline since it existed when this issue was created. Is there still need for changes to get full rhel8 support running or is this closable?

Answer 7 · 2021-06-23T06:13:40.000Z

The version 6.0.0 released on https://forge.puppet.com/modules/saz/sudo does not contain the RHEL8 template. At the git report here the template exists. So it looks like, it was forgotten to release an new version?

Answer 8 · 2021-06-23T07:42:08.000Z

Ah ok now its clear, yea. @saz I think this needs the release required tag :)
Edit: Maybe a new milestone wouldnt be bad, then I know what you want to get done for a new release and can focus on those issues

Answer 9 · 2021-06-23T08:06:20.000Z

@zilchms added. Thanks for the clarification!

Answer 10 · 2021-08-05T16:36:04.000Z

I've just released v7.0.0 which fixes this issue.