From b78cc96cc4c4d506b7e959ec6ec9c3e7fc09fc33 Mon Sep 17 00:00:00 2001
From: Christian Breunig <christian@breunig.cc>
Date: Mon, 26 Aug 2024 20:23:32 +0200
Subject: T861: op-mode: "show version" will display secure boot state

  vyos@vyos:~$ show ver
  ...
  Architecture:     x86_64
  Boot via:         installed image
  System type:      KVM guest
  Secure Boot:      enabled
  ...
---
 src/etc/sudoers.d/vyos | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'src/etc')

diff --git a/src/etc/sudoers.d/vyos b/src/etc/sudoers.d/vyos
index 63a944f41..67d7babc4 100644
--- a/src/etc/sudoers.d/vyos
+++ b/src/etc/sudoers.d/vyos
@@ -57,4 +57,7 @@ Cmnd_Alias KEA_IP6_ROUTES = /sbin/ip -6 route replace *,\
 # Allow members of group sudo to execute any command
 %sudo ALL=NOPASSWD: ALL
 
+# Allow any user to query Machine Owner Key status
+%sudo ALL=NOPASSWD: /usr/bin/mokutil
+
 _kea ALL=NOPASSWD: KEA_IP6_ROUTES
-- 
cgit v1.2.3