Howdy,

I've been trying to figure this out for a couple of days now. Essentially I am setting up a loaner laptop that uses active directory. This laptop is using Linux mint 22.3. I want users to be able to install apps, but only from the the gui software manager and apt install in the terminal. I don't want the other users to have any other sudo privileges. I managed to configure it to allow a non admin user from within the domain to use apt in the terminal to install packages, but for some reason it doesn't let me do it in the gui software manager without the root password.

I used visudo to edit the sudoers folder. I tried different varations of this line: %domain\ users@MY-Domain.com ALL=(ALL:ALL) /usr/bin/apt-get, /usr/bin/apt, /usr/bin/mintinstall, /usr/share/software-manager

Any help on this would be greatly appreciated.

you are viewing a single comment's thread
view the rest of the comments
[–] [S] 3 points 13 hours ago

Most of the people using the loaner are not technically inclined at all. I just want to make it more difficult for them to accidentally break it and not know that they did. I do already have a custom ISO that I use for it, so a drive image won't be an issue, but if they have important data on there and break it it'll be more difficult to recover, so I'd rather prevent it as much as I can.

  • source
  • parent