Disable PAM for sudo in Fedora ci

This commit is contained in:
Filipe PINTO 2024-10-15 19:00:25 +02:00 committed by fpinto
parent 5dbce19ba4
commit 12dc0cdaeb
No known key found for this signature in database
GPG Key ID: F4F06B068FB00692
4 changed files with 20 additions and 0 deletions

View File

@ -277,6 +277,9 @@ jobs:
options: --volume ${{ github.workspace }}:/work --workdir /work --privileged options: --volume ${{ github.workspace }}:/work --workdir /work --privileged
run: | run: |
set -e set -e
echo "::group::Disable PAM for sudo with root and no tty"
bin/disable_pam_for_sudo.sh
echo "::endgroup::"
echo "::group::Install system prerequisites" echo "::group::Install system prerequisites"
bin/install_prerequisites_fedora.sh bin/install_prerequisites_fedora.sh
echo "::endgroup::" echo "::endgroup::"

View File

@ -199,6 +199,9 @@ jobs:
options: --volume ${{ github.workspace }}:/work --workdir /work --privileged --env CARGO_TERM_COLOR=always options: --volume ${{ github.workspace }}:/work --workdir /work --privileged --env CARGO_TERM_COLOR=always
run: | run: |
set -e set -e
echo "::group::Disable PAM for sudo with root and no tty"
bin/disable_pam_for_sudo.sh
echo "::endgroup::"
echo "::group::Install Prerequisites" echo "::group::Install Prerequisites"
bin/install_prerequisites_fedora.sh bin/install_prerequisites_fedora.sh
echo "::endgroup::" echo "::endgroup::"

11
bin/disable_pam_for_sudo.sh Executable file
View File

@ -0,0 +1,11 @@
#!/bin/bash
set -Eeuo pipefail
echo "----- Disable PAM for sudo -----"
{
echo "auth sufficient pam_permit.so"
echo "account sufficient pam_permit.so"
echo "session sufficient pam_permit.so"
} > /etc/pam.d/sudo
cat /etc/pam.d/sudo

View File

@ -6,6 +6,9 @@ date
echo "# os" echo "# os"
uname -a uname -a
echo "# user"
whoami
echo "# python3" echo "# python3"
if command -V python3 ; then if command -V python3 ; then
which python3 which python3