From 442931529121e9e402e7ac56e27df3dcec43167b Mon Sep 17 00:00:00 2001 From: Patrick Schleizer Date: Sun, 12 Apr 2020 16:52:55 -0400 Subject: [PATCH] disable proc-hidepid by default because incompatible with pkexec and undo pkexec wrapper --- etc/sudoers.d/pkexec-security-misc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/etc/sudoers.d/pkexec-security-misc b/etc/sudoers.d/pkexec-security-misc index c62c622..2e089be 100644 --- a/etc/sudoers.d/pkexec-security-misc +++ b/etc/sudoers.d/pkexec-security-misc @@ -2,10 +2,10 @@ ## See the file COPYING for copying conditions. ## REVIEW: is it ok that users can find out the PATH setting of root? -%sudo ALL=NOPASSWD: /usr/lib/security-misc/echo-path +#%sudo ALL=NOPASSWD: /usr/lib/security-misc/echo-path ## xfpm-power-backlight-helper demands environment variable PKEXEC_UID to be ## set. Would otherwise error out with the following error message: ## "This program must only be run through pkexec" ## REVIEW: Can bad things be done by spoofing PKEXEC_UID? -Defaults:ALL env_keep += "PKEXEC_UID" +#Defaults:ALL env_keep += "PKEXEC_UID"