From 0e765057150efb82d7c128dc72a2946cc345d8ca Mon Sep 17 00:00:00 2001 From: Wesley van Tilburg Date: Tue, 20 Oct 2026 11:30:20 +0000 Subject: [PATCH] fedora-intune: grant sudo to the Linux admins Entra group local_sudo_group was set to wheel but sudo_groups was empty, so no Entra user ever got sudo. Members of the Entra group c3b1cfcc-7834-47eb-948b-a22204276453 now get wheel at sign-in, and lose it again after leaving the group. Co-Authored-By: Claude Opus 5.5 (1M context) --- images/fedora-intune/files/himmelblau.conf | 3 +++ 1 file changed, 3 insertions(+) diff --git a/images/fedora-intune/files/himmelblau.conf b/images/fedora-intune/files/himmelblau.conf index b973b44..2fecf35 100644 --- a/images/fedora-intune/files/himmelblau.conf +++ b/images/fedora-intune/files/himmelblau.conf @@ -11,6 +11,9 @@ apply_policy = true # Fedora's admin group; members of sudo_groups (Entra group object IDs) are # added to it. local_sudo_group = wheel +# Linux admins: members get wheel (sudo) at sign-in, and lose it again within +# local_groups_reconcile_interval after leaving the group. +sudo_groups = c3b1cfcc-7834-47eb-948b-a22204276453 # Home directories named after the account (e.g. /home/jdoe), with a UPN alias. home_attr = CN home_alias = SPN