summaryrefslogtreecommitdiffstats
path: root/config/chroot_local-includes/etc/sudoers.d/zzz_upgrade
blob: ac29a4427ab43714420223d06b95fe9347198a75 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
Cmnd_Alias INSTALL_IUK = /bin/chmod, /bin/cp, /bin/dd, /bin/mkdir, /bin/mktemp, /bin/mount, /bin/rm, /bin/tar, /lib/live/mount/medium/utils/linux/syslinux
Cmnd_Alias IUK_GET_TARGET_FILE = /usr/bin/tails-iuk-get-target-file
Cmnd_Alias UPGRADE_FRONTEND = /usr/bin/tails-upgrade-frontend ""

Defaults!IUK_GET_TARGET_FILE env_keep+="HARNESS_ACTIVE DISABLE_PROXY"
Defaults!UPGRADE_FRONTEND env_keep+="DISABLE_PROXY SSL_NO_VERIFY"

amnesia                ALL = (tails-upgrade-frontend)    NOPASSWD: UPGRADE_FRONTEND
tails-upgrade-frontend ALL =                             NOPASSWD: /usr/bin/tails-shutdown-network ""
tails-upgrade-frontend ALL = (tails-install-iuk)         NOPASSWD: /usr/bin/tails-install-iuk
tails-upgrade-frontend ALL = (tails-iuk-get-target-file) NOPASSWD: IUK_GET_TARGET_FILE
tails-upgrade-frontend ALL = (tails-iuk-get-target-file) NOPASSWD: /usr/bin/tails-iuk-mktemp-get-target-file ""
tails-upgrade-frontend ALL =                             NOPASSWD: /sbin/reboot ""

tails-install-iuk     ALL =                             NOPASSWD: INSTALL_IUK