%wheel ALL=(ALL:ALL) NOPASSWD:SETENV: ALL
Yep. If you use AI tooling this is what you should do. It seems contrary to all traditional lecture and it is is, but it works.
>>109396664but the agent already runs as root
>>109396681yeah, honestly making it use sudo just eats more tokens
>>109396653In the early 2010s I worked for an MSP and we spent like 18 months combing through every sudo config we managed to clean up shit like this
>>109396653has anyone EVER been pwned by local privesc on a normal desktop system
>>109396653%wheel ALL=(ALL:ALL) NOPASSWD: /usr/bin/nm-applet
%wheel ALL=(ALL:ALL) NOPASSWD: /usr/bin/nm-applet