From 936c799cb5f48376fa259bb3b92b653526a00509 Mon Sep 17 00:00:00 2001 From: Aaron Rainbolt Date: Tue, 18 Nov 2025 23:53:03 -0600 Subject: [PATCH] Don't break passwordless sudo in unrestricted admin mode --- .../security-misc/block-unsafe-logins#security-misc-shared | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/usr/libexec/security-misc/block-unsafe-logins#security-misc-shared b/usr/libexec/security-misc/block-unsafe-logins#security-misc-shared index 21a7654..3230ff3 100755 --- a/usr/libexec/security-misc/block-unsafe-logins#security-misc-shared +++ b/usr/libexec/security-misc/block-unsafe-logins#security-misc-shared @@ -8,6 +8,8 @@ set -o nounset set -o errtrace set -o pipefail +source /usr/libexec/helper-scripts/package_installed_check.sh + if [ -z "${PAM_USER:-}" ]; then true "$0: ERROR: Environment variable 'PAM_USER' is unset!" ## 'exit 0' here to let the appropriate PAM module handle this. @@ -19,6 +21,11 @@ if [ -z "${PAM_SERVICE:-}" ]; then exit 0 fi +if ! pkg_installed 'user-sysmaint-split' ; then + true "$0: INFO: user-sysmaint-split not installed. Proceeding, ok." + exit 0 +fi + kernel_cmdline='' if [ -r /proc/cmdline ]; then kernel_cmdline="$(cat /proc/cmdline)"