Package: user-sysmaint-split
Version: 3:10.6-1
Architecture: all
Maintainer: Patrick Schleizer <adrelanos@kicksecure.com>
Installed-Size: 190
Pre-Depends: helper-scripts
Depends: security-misc-shared, adduser
Breaks: qubes-core-agent-passwordless-root (>= 1)
Section: misc
Priority: optional
Homepage: https://github.com/Kicksecure/user-sysmaint-split
Description: Role-Based Boot Modes - user versus sysmaint
 Adds a GRUB boot menu entry:
 "PERSISTENT Mode | SYSMAINT Session | system maintenance tasks"
 .
 Makes Privilege Escalation Tools (such as 'sudo', 'su', 'pkexec')
 inaccessible to limited user accounts such as account "user".
 .
 Adds kernel parameter "boot-role=sysmaint" and
 "systemd.unit=sysmaint-boot.target".