vmbuilder should write sudoers file with admin group

Are we sure that group "admin" should have sudo rights by default in Karmic? It doesn't in Jaunty.

When this bug was submitted, the AMI in question had a comment in /etc/sudoers which claimed that "admin" should have sudo privs, but the actual line to implement this was missing.

The latest Alpha-6 Karmic AMI does not include the comment and looks like the file is reasonable to me. Perhaps somebody could compare it to a standard Karmic /etc/sudoers; the only difference should be that "ubuntu" has sudo on everything.

On Tue, 22 Sep 2009, Eric Hammond wrote:

> Are we sure that group "admin" should have sudo rights by default in
> Karmic? It doesn't in Jaunty.

I just checked a vm desktop install of jaunty. That is identical to my
karmic laptop.

$ sudo grep admin /etc/sudoers
[sudo] password for ubuntu:
# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL

By default on ubuntu, members of the admin group can sudo with their
password. On ec2 images, the ubuntu user can sudo *without* a password.

I believe the request here was to add the group 'admin' back to sudoers so
that methods to add root access to a user would work on ec2 the same as on
non-ec2.

At least, what I was intending on doing was insert an admin line before
'ubuntu's entry, so that members of the group admin could use sudo to
become root by providing their password. Ie, new /etc/sudoers would
have:

root ALL=(ALL) ALL
ubuntu ALL=(ALL) NOPASSWD:ALL
# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL

Upon further review, I stand corrected and the bug stands.

I'm un-milestoning this bug. The changes have been commited to vmbuilder trunk. vmbuilder trunk is what we're using to build the images for ec2/uec. The fix is also released in those images (included in beta images). What is left is the needed is to update vmbuilder.

This bug was fixed in the package vm-builder - 0.11.2-0ubuntu1

---------------
vm-builder (0.11.2-0ubuntu1) karmic; urgency=low

  * New upstream (bugfix-only) release. (LP: #410886, #439868, #426438, #429169, #423497)

 -- Soren Hansen <email address hidden> Thu, 22 Oct 2009 15:07:36 +0200