-
Feature Request
-
Resolution: Unresolved
-
Normal
-
None
-
2.4, 2.5
-
None
-
False
-
-
False
The reason for this is because some customers use another product (Centrify) which comes with a modified sudo to allow us to use active directory to authenticate proper escalation for all users to the root user.
They have a policies in place where we don't allow (actually remove the sudo package) the installation of the sudo package because someone could modify the sudoers files outside their control and have root access without their knowledge.
This is the reason they remove the package to comply with security standards.
Having the installer require the installation of the package defeats this purpose and requires them to work-around this or needing to install the package temporarily.
In such cases where they might have to install the package, the step to remove it could be missed and lead to an issue with security where someone could modify the sudoers files and have root account without their knowledge.