Don't create insecure sudoers file

lima-vm / lima

Linux virtual machines, with a focus on running containers

https://lima-vm.io/

Apache License 2.0

15.07k stars 591 forks source link

Don't create insecure sudoers file #2664

Closed jandubois closed 43 minutes ago

jandubois commented 1 day ago

We need to validate the paths before we generate a sudoers file.

Lima would not execute commands when they are insecure, but another app or user could once they are configured in /etc/sudoers.d. So it is best not to generate an insecure file at all.

Fixes #2663

jandubois commented 1 day ago

Sorry for the churn, but the initial PR was not correct.

I believe it is fixed now and ready for review.