summaryrefslogtreecommitdiff
path: root/src/etc
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2024-09-16 17:33:10 +0200
committerGitHub <noreply@github.com>2024-09-16 17:33:10 +0200
commit53fa5c9e93a45e2f8c78adf69652bc2f875cef53 (patch)
treee49d7d635809da09df83898e720f9b053e2dfb11 /src/etc
parent27e2016952f8fdd01d59f73c67ac9b8a30b756b6 (diff)
parent07c4fe9ba4511f06bdd302cf37b3059ea86df8c6 (diff)
downloadvyos-1x-53fa5c9e93a45e2f8c78adf69652bc2f875cef53.tar.gz
vyos-1x-53fa5c9e93a45e2f8c78adf69652bc2f875cef53.zip
Merge pull request #4020 from c-po/secure-boot
T861: op-mode: initial parts for UEFI secure boot CLI
Diffstat (limited to 'src/etc')
-rw-r--r--src/etc/sudoers.d/vyos3
1 files changed, 3 insertions, 0 deletions
diff --git a/src/etc/sudoers.d/vyos b/src/etc/sudoers.d/vyos
index 63a944f41..67d7babc4 100644
--- a/src/etc/sudoers.d/vyos
+++ b/src/etc/sudoers.d/vyos
@@ -57,4 +57,7 @@ Cmnd_Alias KEA_IP6_ROUTES = /sbin/ip -6 route replace *,\
# Allow members of group sudo to execute any command
%sudo ALL=NOPASSWD: ALL
+# Allow any user to query Machine Owner Key status
+%sudo ALL=NOPASSWD: /usr/bin/mokutil
+
_kea ALL=NOPASSWD: KEA_IP6_ROUTES