config/chroot_local-includes/etc/sudoers.d/zzz_upgrade

   1 Cmnd_Alias INSTALL_IUK = /bin/chmod, /bin/cp, /bin/dd, /bin/mkdir, /bin/mktemp, /bin/mount, /bin/rm, /bin/tar, /lib/live/mount/medium/utils/linux/syslinux
   2 Cmnd_Alias IUK_GET_TARGET_FILE = /usr/bin/tails-iuk-get-target-file
   3 Cmnd_Alias UPGRADE_FRONTEND = /usr/bin/tails-upgrade-frontend ""
   4
   5 Defaults!IUK_GET_TARGET_FILE env_keep+="HARNESS_ACTIVE DISABLE_PROXY"
   6 Defaults!UPGRADE_FRONTEND env_keep+="DISABLE_PROXY SSL_NO_VERIFY"
   7
   8 amnesia                ALL = (tails-upgrade-frontend)    NOPASSWD: UPGRADE_FRONTEND
   9 tails-upgrade-frontend ALL =                             NOPASSWD: /usr/bin/tails-shutdown-network ""
  10 tails-upgrade-frontend ALL = (tails-install-iuk)         NOPASSWD: /usr/bin/tails-install-iuk
  11 tails-upgrade-frontend ALL = (tails-iuk-get-target-file) NOPASSWD: IUK_GET_TARGET_FILE
  12 tails-upgrade-frontend ALL = (tails-iuk-get-target-file) NOPASSWD: /usr/bin/tails-iuk-mktemp-get-target-file ""
  13 tails-upgrade-frontend ALL =                             NOPASSWD: /sbin/reboot ""
  14 tails-upgrade-frontend ALL = (debian-tor)                NOPASSWD: /usr/local/sbin/tor-has-bootstrapped ""
  15
  16 tails-install-iuk     ALL =                             NOPASSWD: INSTALL_IUK