mirror of
https://github.com/optim-enterprises-bv/secureblue.git
synced 2025-11-03 11:58:26 +00:00
docs: remove stuff that doesn't belong in the postinstall instructions
This commit is contained in:
@@ -78,35 +78,12 @@ Creating a dedicated wheel user and removing wheel from your primary user helps
|
|||||||
6. ```gpasswd -d {your username here} wheel```
|
6. ```gpasswd -d {your username here} wheel```
|
||||||
7. ```reboot```
|
7. ```reboot```
|
||||||
|
|
||||||
When not in the wheel group, a user can be added to a dedicated group, otherwise certain actions are blocked:
|
When using a non-wheel user, you can add the user to other groups if you want. For example:
|
||||||
|
|
||||||
- use virtual machines: `libvirt`
|
- use libvirt: `libvirt`
|
||||||
- use `adb` and `fastboot`: `plugdev`
|
- use `adb` and `fastboot`: `plugdev`
|
||||||
- use systemwide flatpaks: `flatpak`
|
- use systemwide flatpaks: `flatpak`
|
||||||
|
|
||||||
Some actions don't have an associated group yet, you can create your own rules and groups to fix this.
|
|
||||||
|
|
||||||
**Example**: To allow a non-wheel user to use LUKS encrypted external drives:
|
|
||||||
|
|
||||||
1. `sudo groupadd diskadmin`
|
|
||||||
2. `sudo usermod -aG diskadmin {your username here}`
|
|
||||||
3. execute this command (*explanation below*)
|
|
||||||
|
|
||||||
```
|
|
||||||
cat >> /etc/polkit-1/rules.d/80-udisks2.rules <<EOF
|
|
||||||
polkit.addRule(function(action, subject) {
|
|
||||||
if (action.id == "org.freedesktop.udisks2.encrypted-unlock-system" || action.id == "org.freedesktop.udisks2.filesystem-mount-system" &&
|
|
||||||
subject.active == true && subject.local == true &&
|
|
||||||
subject.isInGroup("diskadmin"))
|
|
||||||
{
|
|
||||||
return polkit.Result.YES;
|
|
||||||
}
|
|
||||||
});
|
|
||||||
EOF
|
|
||||||
```
|
|
||||||
|
|
||||||
The custom rule allows the group`diskadmin` to do the actions for unlocking and mounting these drives. Note the requirement on `active` and `local`, and the exactly specified actions.
|
|
||||||
|
|
||||||
## Chromium extension
|
## Chromium extension
|
||||||
|
|
||||||
1. Go to [uBlock Origin Lite](https://chromewebstore.google.com/detail/ublock-origin-lite/ddkjiahejlhfcafbddmgiahcphecmpfh?pli=1) ([Why Lite?](https://developer.chrome.com/docs/extensions/develop/migrate/improve-security))
|
1. Go to [uBlock Origin Lite](https://chromewebstore.google.com/detail/ublock-origin-lite/ddkjiahejlhfcafbddmgiahcphecmpfh?pli=1) ([Why Lite?](https://developer.chrome.com/docs/extensions/develop/migrate/improve-security))
|
||||||
|
|||||||
Reference in New Issue
Block a user