Comment 10 for bug 8586

Revision history for this message
Colin Watson (cjwatson) wrote :

Actually, thinking about it, doing this in sudo.postinst at all is fraught with
problems. I propose a simpler solution: simply create the admin group in
passwd.config, and do away with all the changes to sudo. This allows us to do
nice things like omit the admin group from sudoers if a root password is set
(since in that case we don't add the initial user to sudoers, and there's a good
chance that the administrator doesn't want to use sudo to gain root privileges),
but more importantly it means that there's no chance that the admin group might
get created on upgrade and conflict with somebody's existing use of a group by
the same name.

I'm working on this now; the patch is smaller, which is often a good sign. :-)