diff --git a/etc/security/access-security-misc.conf b/etc/security/access-security-misc.conf index b4956b9..b0e9974 100644 --- a/etc/security/access-security-misc.conf +++ b/etc/security/access-security-misc.conf @@ -26,6 +26,10 @@ ## - 'hvc0' to 'hvc9' +:console:console tty1 tty2 tty3 tty4 tty5 tty6 tty7 pts/0 pts/1 pts/2 pts/3 pts/4 pts/5 pts/6 pts/7 pts/8 pts/9 hvc0 hvc1 hvc2 hvc3 hvc4 hvc5 hvc6 hvc7 hvc8 hvc9 +## Same as above also for members of group `sudo`. +## https://github.com/Whonix/security-misc/pull/74#issuecomment-607748407 ++:sudo:console tty1 tty2 tty3 tty4 tty5 tty6 tty7 pts/0 pts/1 pts/2 pts/3 pts/4 pts/5 pts/6 pts/7 pts/8 pts/9 hvc0 hvc1 hvc2 hvc3 hvc4 hvc5 hvc6 hvc7 hvc8 hvc9 + ## Everyone else except members of group 'console-unrestricted' ## are restricted from everything else. -:ALL EXCEPT console-unrestricted :ALL