From 0480f687f07ff1dfca2735e65b596235f74e08f3 Mon Sep 17 00:00:00 2001 From: Randall Winkhart Date: Sun, 26 Jun 2022 16:22:13 -0400 Subject: [PATCH] Whitelisted cpupower and poweroff/reboot commands for nopass in doas.conf --- chrootInstall.sh | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/chrootInstall.sh b/chrootInstall.sh index a9c891c..f494c57 100755 --- a/chrootInstall.sh +++ b/chrootInstall.sh @@ -51,7 +51,15 @@ $userpassword " | passwd "$username" # opendoas configuration -echo "permit persist keepenv $username as root" > /etc/doas.conf +echo "permit persist keepenv $username as root +permit nopass $username as root cmd /usr/bin/cpupower args frequency-set -g powersave +permit nopass $username as root cmd /usr/bin/cpupower args frequency-set -g performance +permit nopass $username as root cmd /usr/bin/cpupower args frequency-set -g schedutil +permit nopass $username as root cmd /usr/bin/cpupower args frequency-set -g ondemand +permit nopass $username as root cmd /usr/bin/poweroff +permit nopass $username as root cmd /usr/bin/reboot +" > /etc/doas.conf + ln -s /usr/bin/doas /usr/bin/sudo # misc. configuration