From eaac507d12474decfb1a3daff7c6e6a5c856c5ca Mon Sep 17 00:00:00 2001 From: Evgenii Alekseev Date: Mon, 17 Aug 2026 12:26:56 +0300 Subject: [PATCH] feat: limit environment variables passed to sudo --- archlinux/sudoers.conf | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/archlinux/sudoers.conf b/archlinux/sudoers.conf index 3ffc193c..f3338799 100644 --- a/archlinux/sudoers.conf +++ b/archlinux/sudoers.conf @@ -1 +1,2 @@ -ahriman ALL= NOPASSWD:SETENV: /usr/bin/ahriman-archbuild * +Defaults!/usr/bin/ahriman-archbuild env_keep += "SOURCE_DATE_EPOCH SRCDEST SRCPKGDEST PKGDEST LOGDEST NPROC MAKEFLAGS PACKAGER GNUPGHOME" +ahriman ALL= NOPASSWD:NOSETENV: /usr/bin/ahriman-archbuild *