From af405ffd5a4d8e9ec872bc15351af41130c39b94 Mon Sep 17 00:00:00 2001 From: Thomas Danielsson <463066+tumd@users.noreply.github.com> Date: Sat, 8 Aug 2026 03:36:01 +0200 Subject: [PATCH] Update sudoers file to not include dots (#2080) - Closes #1713. - Files under /etc/sudoers.d/ must not contain dots as these will be ignored as "backup-files". When writing the sudoers file, replace `.` with `_` in the username to form the filename. --- Sources/Plugins/MachineAPIServer/Resources/create-user.sh | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/Sources/Plugins/MachineAPIServer/Resources/create-user.sh b/Sources/Plugins/MachineAPIServer/Resources/create-user.sh index 0a4a4bca..3260afe2 100755 --- a/Sources/Plugins/MachineAPIServer/Resources/create-user.sh +++ b/Sources/Plugins/MachineAPIServer/Resources/create-user.sh @@ -42,5 +42,6 @@ fi chown -R "${CONTAINER_UID}:${CONTAINER_GID}" "${CONTAINER_HOME}" mkdir -p /etc/sudoers.d -echo "${CONTAINER_USER} ALL=(ALL) NOPASSWD:ALL" > "/etc/sudoers.d/${CONTAINER_USER}" -chmod 440 "/etc/sudoers.d/${CONTAINER_USER}" +sudoers_file=$(echo "${CONTAINER_USER}" | tr '.' '_') +echo "${CONTAINER_USER} ALL=(ALL) NOPASSWD:ALL" > "/etc/sudoers.d/${sudoers_file}" +chmod 440 "/etc/sudoers.d/${sudoers_file}"