Bruce Anderson wrote:
This may be slightly off topic, but why is /etc/sudoers being modified in an update at all? I thought that several months ago there was a big announcement that all distribution configuration files would be put in /usr/etc and only admin modified files would be placed in /etc.
Actually it's not off topic. Let me summarize it for you. A bug [1] was filed for the ALP product -yes ALP, not Tumbleweed- pointing out the current practice of using "targetpw" for sudo, and possibly change this behavior. That makes sense as ALP seems to be the next stable openSUSE release, after Leap [2]. And, if there's any security enhancements to be done, this is a good time for them, so that changes can be tested as early/much as possible. Currently, a default openSUSE Leap/Tumbleweed installation offers to use the same password for both the normal user being created and the super user root (this seems to be more of a convenience for the majority of users that won't share their systems with someone else, you only have to remember one password, not two). And the sudo command, before that change, would ask for the root password (the "Defaults targetpw" line that got removed) instead of the user's. Now, I don't know why on earth that change ended up in openSUSE:Factory and in Tumbleweed/MicroOS eventually, since there's already a SUSE:ALP project [3] (that even have some prototype images for people to test it, already [4]). From my perspective, it was a careless move made by one of the SUDO package's maintainers, a change that I don't think was manually tested by someone. And let's suppose that that change (make the sudo command ask for the user's password instead of the root super user, by default) was really suppose to happen in openSUSE:Factory, and in Tumbleweed/MicroOS eventually. I'm sure there are ways of making that happens _without_ breaking sudo. [1] https://bugzilla.opensuse.org/show_bug.cgi?id=1203978 [2] https://news.opensuse.org/tag/adaptable-linux-platform [3] https://build.opensuse.org/project/show/SUSE:ALP [4] https://download.opensuse.org/repositories/SUSE:/ALP/images/