Le 20-10-26 à 21:40, Marc Haber a écrit :
On Tue, Oct 20, 2026 at 06:01:34PM +0200, Laurent Bigonville wrote:
Upstream installs the /etc/sudoers.d directory with the mode 0750 while
the debian package installs it as 0755.
Shouldn't we follow upstream here?
No, Debian policy trumps upstream here. There is no reason to break sudo¹
in sudo.
Greetings
Marc
¹ having 750 directories breaks tab completion and shell globbing
But it protects the snippets installed by local administrators that have
potentially wrong permissions, /etc/sudoers is 0440 already.
Are we really putting tab-completion above that? That doesn't sound a
reason from deviating from upstream (and other distributions)
The policy (§10.10) explicitly says "The rules in this section are
guidelines for general use. If necessary you may deviate from the
details below. However, if you do so you must make sure that what is
done is secure and you should try to be as consistent as possible with
the rest of the system." BTW
