Joey Riches (#joebonrichie), 2022-09-07 11:50:01 UTC
In solus historically we've used the sudo group instead of wheel as the default admin group, for the historical reasons why, I don't know. Regardless, most software assumes that the wheel group is the default sudo group and we have to patch several packages to change it to use sudo. I am sure some functionality gets broken as we don't necessarily notice all of the packages that assume wheel.
> wheel n. [from slang `big wheel' for a powerful person] A person who has an active wheel bit. "We need to find a wheel to unwedge the hung tape drives." (See wedged, sense 1.) The traditional name of security group zero in BSD (to which the major system-internal users like root belong) is `wheel'. Some vendors have expanded on this usage, modifying Unix so that only members of group `wheel' can go root.
To resolve:
- [x] Transition to new go-based `qol-assist` (R3820:b96412101e5477093c5dcd6d93fa599550ddbd11)
- [ ] Implement support in `qol-assist` to remove users from a group. https://github.com/getsolus/qol-assist/issues/3 (https://github.com/getsolus/qol-assist/pull/4)
- [ ] Add a migration in `qol-assist` that adds active admin users to the wheel group
- [ ] Change the default sudo group to wheel in the `sudo` package
- [ ] Change the default admin group from sudo to wheel in the `accountsservice` package
- [ ] Remove our polkit patches that changes the sudo group from wheel to sudo
- [ ] Remove systemd patches that changes the sudo group from wheel to sudo
- [ ] Any other packages (hplip)
- [ ] Add a migration in `qol-assist` that removes active admin users from the sudo group when we are confident it can be removed.
In solus historically we've used the sudo group instead of wheel as the default admin group, for the historical reasons why, I don't know. Regardless, most software assumes that the wheel group is the default sudo group and we have to patch several packages to change it to use sudo. I am sure some functionality gets broken as we don't necessarily notice all of the packages that assume wheel. > wheel n. [from slang `big wheel' for a powerful person] A person who has an active wheel bit. "We need to find a wheel to unwedge the hung tape drives." (See wedged, sense 1.) The traditional name of security group zero in BSD (to which the major system-internal users like root belong) is `wheel'. Some vendors have expanded on this usage, modifying Unix so that only members of group `wheel' can go root. To resolve: - [x] Transition to new go-based `qol-assist` (R3820:b96412101e5477093c5dcd6d93fa599550ddbd11) - [ ] Implement support in `qol-assist` to remove users from a group. https://github.com/getsolus/qol-assist/issues/3 (https://github.com/getsolus/qol-assist/pull/4) - [ ] Add a migration in `qol-assist` that adds active admin users to the wheel group - [ ] Change the default sudo group to wheel in the `sudo` package - [ ] Change the default admin group from sudo to wheel in the `accountsservice` package - [ ] Remove our polkit patches that changes the sudo group from wheel to sudo - [ ] Remove systemd patches that changes the sudo group from wheel to sudo - [ ] Any other packages (hplip) - [ ] Add a migration in `qol-assist` that removes active admin users from the sudo group when we are confident it can be removed.