Page 1 of 1

mintinstall using sudo escalation rather than root password

Posted: Thu Dec 19, 2019 4:59 am
by Wheelspin
So right now I have a root user and a single standard user with sudo rights.
I can run apt use sudo without issue. However, when I use mintinstall to install software, it prompts for the root password. How can I do it based on sudo access?

Re: mintinstall using sudo escalation rather than root password

Posted: Thu Dec 19, 2019 6:13 am
by gm10
It prompts for the same password all other applications asking for root privileges ask for, the password of an account in the sudo and/or admin group. By default that is your account, unless it is not in one of those groups, then you get to select an account that is, if any. It never asks for the root user's password.

Re: mintinstall using sudo escalation rather than root password

Posted: Thu Dec 19, 2019 9:32 am
by Wheelspin
ahh, ok. So having sudo access is not the same as being in the sudo group.
I take it that means that the sudo and admin groups are treated as special by mintinstall?

For example, I'm using a domain user and I have a domain group, which I'm in, given sudo access the same access rights as the admin group, but this is not accepted.

Re: mintinstall using sudo escalation rather than root password

Posted: Thu Dec 19, 2019 9:41 am
by Wheelspin
Apparently this is true. Adding my domain user to the sudo group fixes the problem. This isn't great since I can't just add the domain group to the sudo group. I then have to manually manage the list of sudo users on every host rather than just once in LDAP.

Re: mintinstall using sudo escalation rather than root password

Posted: Thu Dec 19, 2019 9:43 am
by gm10
sudo and admin are the default groups configured for polkit admin access, but you can add other groups. The defaults are in /etc/polkit-1/localauthority.conf.d/51-ubuntu-admin.conf, you can take that as a reference on how to add your domain user group (preferably create a new file rather than edit the existing one so it does not get overwritten in case of an update to the package that owns it).

Re: mintinstall using sudo escalation rather than root password

Posted: Mon Dec 23, 2019 10:39 am
by Wheelspin
Thanks for the direction to polkit. That actually looks rather interesting for a number of different things.