fedora-intune: grant sudo to the Linux admins Entra group

local_sudo_group was set to wheel but sudo_groups was empty, so no Entra user ever got sudo. Members of the Entra group c3b1cfcc-7834-47eb-948b-a22204276453 now get wheel at sign-in, and lose it again after leaving the group. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Merge pull request 'Misthios/fedora intune os version defender' (#2 ) from misthios/fedora-intune-os-version-defender into main
2026-10-20 11:30:20 +00:00 · 2026-10-20 09:22:41 +00:00
1 changed files with 3 additions and 0 deletions
@@ -11,6 +11,9 @@ apply_policy = true
 # Fedora's admin group; members of sudo_groups (Entra group object IDs) are
 # added to it.
 local_sudo_group = wheel
+# Linux admins: members get wheel (sudo) at sign-in, and lose it again within
+# local_groups_reconcile_interval after leaving the group.
+sudo_groups = c3b1cfcc-7834-47eb-948b-a22204276453
 # Home directories named after the account (e.g. /home/jdoe), with a UPN alias.
 home_attr = CN
 home_alias = SPN
Author	SHA1	Message	Date
Wesley van TilburgandClaude Opus 5.5	0e76505715	fedora-intune: grant sudo to the Linux admins Entra group Build containers / fedora-cosmic (44) (pull_request) Canceled after 0s Details Build containers / fedora-cosmic (rawhide) (pull_request) Canceled after 0s Details Build containers / fedora-remote (44) (pull_request) Canceled after 0s Details Build containers / fedora-intune (44) (pull_request) Canceled after 0s Details Build containers / Compute changes (pull_request) Canceled after 12s Details Build containers / Prune old releases and tags (pull_request) Skipped Details local_sudo_group was set to wheel but sudo_groups was empty, so no Entra user ever got sudo. Members of the Entra group c3b1cfcc-7834-47eb-948b-a22204276453 now get wheel at sign-in, and lose it again after leaving the group. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>	2026-10-20 11:30:20 +00:00
Misthios	f48a0ffaf6	Merge pull request 'Misthios/fedora intune os version defender' (#2 ) from misthios/fedora-intune-os-version-defender into main Build containers / Compute changes (push) Successful in 20s Details Build containers / fedora-intune (44) (push) Canceled after 0s Details Build containers / fedora-cosmic (44) (push) Canceled after 33s Details Build containers / fedora-cosmic (rawhide) (push) Canceled after 33s Details Build containers / fedora-remote (44) (push) Canceled after 34s Details Build containers / Prune old releases and tags (push) Successful in 24s Details Reviewed-on: #2	2026-10-20 09:22:41 +00:00