Restrict sudo to specific group

1 files changed, 4 insertions, 0 deletions

diff --git a/src/init b/src/init
index 9c4107d..619c97e 100755
--- a/src/init
+++ b/src/init
@@ -31,6 +31,8 @@ function createUser
 	# user is not restricted, this is done in ssh config with forceCommand
 	# we need to be able to run a fish script to check for permissions
 	adduser --home $HOME -D "$user"
+	# add user to sudo group
+	addgroup "$user" $_GIT_SUDO_GROUP
 	# unlock account to allow ssh logins
 	passwd -u "$user"
 	mkdir "$HOME/.ssh"
@@ -45,6 +47,8 @@ function setupGitUser
 	# git user has read/write access to all repos, set git-shell
 	# and no password login allowed -> no ssh login possible
 	adduser git -u $GIT_UID -D --shell "/usr/bin/git-shell"
+	# group that is allowed to sudo
+	addgroup $_GIT_SUDO_GROUP
 end
 
 function setupRepo