Amir Alexander Abdelbaki 87b62f368b feat(ansipa): rework binary blocking as per-user policy; add local_sudo device policy ... policy-block-binary-<name> is now a FreeIPA *user* group instead of a host group, so restrictions follow the user to every enrolled machine. The PATH wrapper is installed on all hosts and checks group membership at runtime via id(1)/SSSD, passing non-members through transparently. __ in the group name decodes to . so Flatpak app IDs are supported (flatpak run fallback included). AppArmor layer removed since per-user confinement requires a different approach and the wrapper alone is sufficient. Adds local_sudo_<username> host group policy which writes a sudoers drop-in granting that user full sudo on the specific device, reverted on group leave. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>		2026-05-20 16:31:43 +02:00
..
Desktop-Environments	fixed theming issues	2026-05-19 14:39:29 +02:00
FreeipaAnsible	feat(ansipa): rework binary blocking as per-user policy; add local_sudo device policy	2026-05-20 16:31:43 +02:00
optional-Modules	feat(modules): add graphic design, video editing, and audio app modules	2026-05-20 15:47:12 +02:00
core-packages.sh	setup: add browser/IDE modules and lynx to core packages	2026-05-18 14:23:43 +02:00
core.sh	added udiskie	2025-11-27 18:04:00 +01:00
package-managers.sh	setup: fix module scripts and add TUI installer	2026-05-08 10:27:43 +02:00
shell-setup.sh	fix(nvim): place airline cyberqueer theme inside rtp so it is auto-discovered	2026-05-19 08:59:50 +02:00