From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andreas Enge Subject: Re: editing /etc/sudoers Date: Mon, 17 Jun 2019 09:17:12 +0200 Message-ID: <20190617071712.GA1566@jurong> References: <20190614115539.GA22815@serpent> <20190616143031.GD12459@serpent> <45f53d38f8dbf54c80bc7e2153785295@riseup.net> <20190616232054.GA1602@nimrod> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:56334) by lists.gnu.org with esmtp (Exim 4.86_2) (envelope-from ) id 1hcltI-0000da-I2 for help-guix@gnu.org; Mon, 17 Jun 2019 03:17:21 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1hcltH-00041t-M2 for help-guix@gnu.org; Mon, 17 Jun 2019 03:17:20 -0400 Received: from hera.aquilenet.fr ([2a0c:e300::1]:54868) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1hcltH-0003uC-F8 for help-guix@gnu.org; Mon, 17 Jun 2019 03:17:19 -0400 Content-Disposition: inline In-Reply-To: <20190616232054.GA1602@nimrod> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: Jeff Bauer Cc: help-guix@gnu.org, Quiliro's lists Hello, On Sun, Jun 16, 2019 at 06:20:54PM -0500, Jeff Bauer wrote: > Okay, to make it more clear: I was having a problem > trying to use visudo on a native Guix System. The > visudo packaged with the Guix System cannot actually > edit a sudoers file because it relies on /usr/bin/vi, > but it can be used as a command line validation checker. maybe my reply is off-topic and does not solve your problem, but to just give sudoer capabilities to a user, it is enough to add them to the "wheel" group in the system declaration, with something like: (operating-system (users (cons* (user-account (name "andreas") (comment "Andreas Enge") (group "users") (supplementary-groups '("wheel")) (home-directory "/home/andreas")) %base-user-accounts)) ... This is in line with the principle that "global" files should not be edited, but instead be declared in some way in the operating system definition. For more sophisticated uses, the file could be declared in the operating system definition, I suppose, but I have no experience with this. Andreas