remove dependency of sudo for abuild
Currently abuild uses sudo to install dependencies with ‘abuild -r’ and to create the pkgusers/pkggroups. We should have suid-root’ed abuild-apk, abuild-adduser and abuild-addgroup which check if the running user is a member of abuild group.
That way, you only need to be a member of abuild group to be able to run abuild and the chroot builder does not need configure sudo.
Note that this does not add any security. You should never add any user to abuild group that you wouldn’t give full sudo permissions.
(from redmine: issue id 951, created on 2012-01-20, closed on 2012-03-06)
- Relations:
- parent #801 (closed)
- Changesets:
- Revision 442e8042 by Natanael Copa on 2012-02-17T13:28:22Z:
abuild-sudo: new tool
mini sudo that checks if user is in "abuild" group and allows it to
run apk, adduser adn addgroup as root
ref #951
- Revision c6263bae by Natanael Copa on 2012-02-17T13:48:11Z:
abuild: remove dependency of sudo
use the abuild-sudo tool instead
fixes #951