From dc1c7549a4bdca4e6a8d190aba4c63dcc903688d Mon Sep 17 00:00:00 2001 From: castrojo Date: Tue, 28 Jul 2026 23:40:46 +0000 Subject: [PATCH 1/2] fix: add consistent bootc sudo policy Assisted-by: GPT-5.6 Luna via GitHub Copilot Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- system_files/shared/etc/sudoers.d/001-bootc | 1 + 1 file changed, 1 insertion(+) create mode 100644 system_files/shared/etc/sudoers.d/001-bootc diff --git a/system_files/shared/etc/sudoers.d/001-bootc b/system_files/shared/etc/sudoers.d/001-bootc new file mode 100644 index 000000000..05e1efde9 --- /dev/null +++ b/system_files/shared/etc/sudoers.d/001-bootc @@ -0,0 +1 @@ +%wheel ALL=(ALL) NOPASSWD: /usr/bin/bootc update, /usr/bin/bootc status, /usr/bin/bootc upgrade From cd5cb04b22a4d4cd8f9348eb01917e069a6a933e Mon Sep 17 00:00:00 2001 From: "Jorge O. Castro" Date: Sat, 12 Sep 2026 23:52:57 -0400 Subject: [PATCH 2/2] fix: restrict sudoers policy to valid bootc upgrade command --- system_files/shared/etc/sudoers.d/001-bootc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/system_files/shared/etc/sudoers.d/001-bootc b/system_files/shared/etc/sudoers.d/001-bootc index 05e1efde9..1794b9650 100644 --- a/system_files/shared/etc/sudoers.d/001-bootc +++ b/system_files/shared/etc/sudoers.d/001-bootc @@ -1 +1 @@ -%wheel ALL=(ALL) NOPASSWD: /usr/bin/bootc update, /usr/bin/bootc status, /usr/bin/bootc upgrade +%wheel ALL=(ALL) NOPASSWD: /usr/bin/bootc upgrade