Package: user-sysmaint-split
Status: install ok half-configured
Priority: optional
Section: misc
Installed-Size: 190
Maintainer: Patrick Schleizer <adrelanos@kicksecure.com>
Architecture: all
Version: 3:10.6-1
Depends: security-misc-shared, adduser
Pre-Depends: helper-scripts
Breaks: qubes-core-agent-passwordless-root (>= 1)
Conffiles:
 /etc/qubes/post-install.d/21-qubes-persistent-mode-sysmaint.sh daab0082645b2c32ab86429a9c0e28e3
 /etc/sudoers.d/user-sysmaint-split 1a717f1d8b8212dddda69968ebce5718
Description: Role-Based Boot Modes - user versus sysmaint
 Adds a GRUB boot menu entry:
 "PERSISTENT Mode | SYSMAINT Session | system maintenance tasks"
 .
 Makes Privilege Escalation Tools (such as 'sudo', 'su', 'pkexec')
 inaccessible to limited user accounts such as account "user".
 .
 Adds kernel parameter "boot-role=sysmaint" and
 "systemd.unit=sysmaint-boot.target".
Homepage: https://github.com/Kicksecure/user-sysmaint-split