From 94862f64f2f6c1c40321e011ac6745a12bbeb2b8 Mon Sep 17 00:00:00 2001 From: Darren 'Tadgy' Austin Date: Fri, 10 Apr 2026 18:20:27 +0000 Subject: [PATCH] Allow AD domain admins root access. --- .gitattributesdb | 24 ++++++++++++------------ etc/sudoers.d/root-access | 3 +++ 2 files changed, 15 insertions(+), 12 deletions(-) diff --git a/.gitattributesdb b/.gitattributesdb index 056647a..00ae8cd 100644 --- a/.gitattributesdb +++ b/.gitattributesdb @@ -636,36 +636,36 @@ b3B0L3NiaW4vcHVzaG92ZXItY2xpZW50 1775491190.061538212 1775491190.061538212 root: b3B0 1771515169.961748163 1771501851.000000000 root:root 0755 - - c2Jpbg== 1773131431.000000000 1773131431.000000000 root:root 0777 - - b3B0L3NiaW4vdGVycmFmb3JtLWh0dHAtYmFja2VuZA== 1775491190.061538212 1775491190.061538212 root:root 0777 - - -cm9vdA== 1775845053.549373752 1771512801.616005200 root:root 0755 - - +cm9vdA== 1775845198.759643332 1771512801.616005200 root:root 0755 - - cm9vdC8uYmFzaF9sb2dvdXQ= 1757582867.000000000 1757582867.000000000 root:root 0644 - - -cm9vdA== 1775845053.549373752 1771512801.616005200 root:root 0755 - - +cm9vdA== 1775845198.759643332 1771512801.616005200 root:root 0755 - - cm9vdC8uYmFzaF9wcm9maWxl 1757584711.000000000 1757584711.000000000 root:root 0644 - - -cm9vdA== 1775845053.549373752 1771512801.616005200 root:root 0755 - - +cm9vdA== 1775845198.759643332 1771512801.616005200 root:root 0755 - - cm9vdC8uYmFzaHJj 1775582233.723180133 1757586493.000000000 root:root 0644 - - -cm9vdA== 1775845053.549373752 1771512801.616005200 root:root 0755 - - +cm9vdA== 1775845198.759643332 1771512801.616005200 root:root 0755 - - cm9vdC8uZ2l0Y29uZmln 1757582738.000000000 1757582738.000000000 root:root 0644 - - -cm9vdA== 1775845053.549373752 1771512801.616005200 root:root 0755 - - +cm9vdA== 1775845198.759643332 1771512801.616005200 root:root 0755 - - cm9vdC8uZ2l0aWdub3Jl 1774104492.728356672 1757600312.000000000 root:root 0644 - - -cm9vdA== 1775845053.549373752 1771512801.616005200 root:root 0755 - - +cm9vdA== 1775845198.759643332 1771512801.616005200 root:root 0755 - - LmxvY2Fs - - c2hhcmU= - - bmFubw== - - cm9vdC8ubG9jYWwvc2hhcmUvbmFuby8uZ2l0aWdub3Jl 1757586210.000000000 1757586210.000000000 root:root 0644 - - -cm9vdA== 1775845053.549373752 1771512801.616005200 root:root 0755 - - +cm9vdA== 1775845198.759643332 1771512801.616005200 root:root 0755 - - cm9vdC8ubmFub3Jj 1757585756.000000000 1757585756.000000000 root:root 0644 - - -cm9vdA== 1775845053.549373752 1771512801.616005200 root:root 0755 - - +cm9vdA== 1775845198.759643332 1771512801.616005200 root:root 0755 - - LnNzaA== - - cm9vdC8uc3NoLy5naXRpZ25vcmU= 1757593349.000000000 1757593349.000000000 root:root 0644 - - -cm9vdA== 1775845053.549373752 1771512801.616005200 root:root 0755 - - +cm9vdA== 1775845198.759643332 1771512801.616005200 root:root 0755 - - LnNzaA== - - cm9vdC8uc3NoL2F1dGhvcml6ZWRfa2V5cw== 1757587611.000000000 1757587611.000000000 root:root 0644 - - -cm9vdA== 1775845053.549373752 1771512801.616005200 root:root 0755 - - +cm9vdA== 1775845198.759643332 1771512801.616005200 root:root 0755 - - c3R1ZmYtdG8ta2VlcA== - - cm9vdC9zdHVmZi10by1rZWVwL2NsZWFuLWZk 1758994151.000000000 1758992264.000000000 root:root 0755 - - -cm9vdA== 1775845053.549373752 1771512801.616005200 root:root 0755 - - +cm9vdA== 1775845198.759643332 1771512801.616005200 root:root 0755 - - c3R1ZmYtdG8ta2VlcA== - - cm9vdC9zdHVmZi10by1rZWVwL2R1bW15LWRlZmF1bHQtbXRh 1762020478.278412865 1762020215.034844513 root:root 0644 - - -cm9vdA== 1775845053.549373752 1771512801.616005200 root:root 0755 - - +cm9vdA== 1775845198.759643332 1771512801.616005200 root:root 0755 - - c3R1ZmYtdG8ta2VlcA== - - cm9vdC9zdHVmZi10by1rZWVwL2R1bW15LWRlZmF1bHQtbXRhXzAuMC4xX2FsbC5kZWI= 1762020499.466056182 1762020499.458056317 root:root 0644 - - dXNy 1774997839.417383939 1771501851.000000000 root:root 0755 - - diff --git a/etc/sudoers.d/root-access b/etc/sudoers.d/root-access index 024d622..76327a9 100644 --- a/etc/sudoers.d/root-access +++ b/etc/sudoers.d/root-access @@ -3,3 +3,6 @@ tadgy ALL=(root) ALL ## Allow the 'sysadmin' user access to root without a password. sysadmin ALL=(root) NOPASSWD: ALL + +## Allow the Active Directory domain administrators access to root without a password. +%Domain\ Admins@directory.slackware.uk.internal ALL=(root) NOPASSWD: ALL