Snap ships a sudoers file that isn't required

Bug #2024876 reported by Barry Price
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mojo: Continuous Delivery for Juju
Confirmed
Low
Unassigned

Bug Description

The contrib/99-mojo-sudoers file shipped by both snap and .deb contains commands that members of the %mojo group are allowed to run.

However, the paths to the binaries in question will differ depending on the install source.

e.g. '/usr/bin/lxc-ls' is correct for the .deb, but the snap will need to allow e.g. '/snap/mojo/148/usr/bin/lxc-ls'.

The release number will vary, so best handled with a wildcard, e.g. '/snap/mojo/*/usr/bin/lxc-ls'

Related branches

Revision history for this message
Barry Price (barryprice) wrote :

Okay, seems like today's three bugs are all related.

Per LP:2024884 we don't support LXC with the snap install, only LXD and containerless projects, which AFAICS means that sudo (and by extension, the LXC group) are not required.

So the fix here is simply to stop shipping the file.

Barry Price (barryprice)
Changed in mojo:
status: New → Confirmed
importance: Undecided → Low
Barry Price (barryprice)
summary: - Snap ships a sudoers file that isn't snap-aware
+ Snap ships a sudoers file that isn't required
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.