From e00ad35dd4adcc21dd83ca063a2e306f8ae8b512 Mon Sep 17 00:00:00 2001 From: sommerfeld Date: Wed, 13 May 2026 13:43:31 +0100 Subject: fix(privesc): revert bogus AssumeInstalled directive MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit AssumeInstalled is only a CLI flag (--assume-installed), not a pacman.conf directive. The line I added was emitting a warning at every pacman run and didn't actually keep base-devel from pulling sudo. Live with sudo installed: /usr/local/bin/sudo (-> sudo-rs) shadows it via PATH precedence, so the /usr/bin/sudo binary is dead code on disk. The alternative — maintaining a dummy 'provides=sudo' package — is more cost than the ~1.5 MB it would save. Update bootstrap.sh comment to reflect that sudo stays installed. --- etc/pacman.conf | 4 ---- 1 file changed, 4 deletions(-) (limited to 'etc/pacman.conf') diff --git a/etc/pacman.conf b/etc/pacman.conf index 53b684a..f6e7e64 100644 --- a/etc/pacman.conf +++ b/etc/pacman.conf @@ -16,10 +16,6 @@ #GPGDir = /etc/pacman.d/gnupg/ #HookDir = /etc/pacman.d/hooks/ HoldPkg = pacman glibc -# sudo-rs replaces sudo (memory-safe Rust rewrite). base-devel still -# lists sudo as a member, so pretend it's installed to keep pacman -# from pulling it in. See https://wiki.archlinux.org/title/Pacman#Skip_package_from_being_installed_to_system -AssumeInstalled = sudo=99.0 #XferCommand = /usr/bin/curl -L -C - -f -o %o %u #XferCommand = /usr/bin/wget --passive-ftp -c -O %o %u #CleanMethod = KeepInstalled -- cgit v1.3.1