From ebae9eef38035a75c8aa3281735eab79ed6f4c46 Mon Sep 17 00:00:00 2001
From: Patrick Schleizer <adrelanos@riseup.net>
Date: Sun, 8 Dec 2019 04:25:19 -0500
Subject: [PATCH] skip sudo_users_check in Qubes

Qubes users can use dom0 to get a root terminal emulator.

For example:
qvm-run -u root debian-10 xterm
---
 debian/security-misc.preinst | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/debian/security-misc.preinst b/debian/security-misc.preinst
index 93c9a78..bd7fb61 100644
--- a/debian/security-misc.preinst
+++ b/debian/security-misc.preinst
@@ -16,6 +16,13 @@ true "
 "
 
 sudo_users_check () {
+   if command -v "qubesdb-read" &>/dev/null; then
+      ## Qubes users can use dom0 to get a root terminal emulator.
+      ## For example:
+      ## qvm-run -u root debian-10 xterm
+      return 0
+   fi
+
    sudo_users="$(getent group sudo | cut -d: -f4)"
    ## example sudo_users:
    ## user,root