[Pkg-sssd-devel] Bug#1023524: sudo should provide a dh-nss definition for the `sudoers` NSS database

[Gioele Barabucci]

Source: sudo
Version: 1.9.11p3-2
Tags: patch
X-Debbugs-CC: pkg-sssd-devel at alioth-lists.debian.net

Dear sudo maintaners,

could you please introduce a `libnss-sudo` (or `libnss-sudoers`) whose 
job is to add the `sudoers` database line in `/etc/nsswitch.conf` via 
`dh_installnss(1)`?

A patch that adds a `libnss-sudo` to `src:sudo` is available at:

https://salsa.debian.org/sudo-team/sudo/-/merge_requests/12

`dh_installnss` (part of `dh-nss`) provides a declarative way to manage 
NSS databases and services. Almost all Debian packages that install NSS 
services have been converted to `dh-nss`.

Introducing `libnss-sudo` and moving to `dh-nss` will also solve the 
issues described in #783889 [1]. sssd has already been converted to 
dh-nss [2,3]. The last remaining piece of the puzzle is having the 
`sudoers` database declared in an ad-hoc package like `libnss-sudo`.

Regards,

[1] https://bugs.debian.org/783889
[2] https://salsa.debian.org/sudo-team/sudo/-/merge_requests/12
[3] https://salsa.debian.org/sssd-team/sssd/-/merge_requests/16

--
Gioele Barabucci