20

Howdy,

I've been trying to figure this out for a couple of days now. Essentially I am setting up a loaner laptop that uses active directory. This laptop is using Linux mint 22.3. I want users to be able to install apps, but only from the the gui software manager and apt install in the terminal. I don't want the other users to have any other sudo privileges. I managed to configure it to allow a non admin user from within the domain to use apt in the terminal to install packages, but for some reason it doesn't let me do it in the gui software manager without the root password.

I used visudo to edit the sudoers folder. I tried different varations of this line: %domain\ users@MY-Domain.com ALL=(ALL:ALL) /usr/bin/apt-get, /usr/bin/apt, /usr/bin/mintinstall, /usr/share/software-manager

Any help on this would be greatly appreciated.

you are viewing a single comment's thread
view the rest of the comments
[-] tal@lemmy.today 8 points 1 day ago* (last edited 1 day ago)

I'd suggest a different approach. Instead of trying to lock down the loaner, which probably is going to be difficult to do against someone with physical possession anyway, just make a drive image of the loaner before giving it to them. When you get it back, just restore the image.

[-] countrypunk@slrpnk.net 3 points 20 hours ago

Most of the people using the loaner are not technically inclined at all. I just want to make it more difficult for them to accidentally break it and not know that they did. I do already have a custom ISO that I use for it, so a drive image won't be an issue, but if they have important data on there and break it it'll be more difficult to recover, so I'd rather prevent it as much as I can.

this post was submitted on 27 Jul 2026
20 points (100.0% liked)

Linux

18414 readers
64 users here now

Welcome to c/linux!

Welcome to our thriving Linux community! Whether you're a seasoned Linux enthusiast or just starting your journey, we're excited to have you here. Explore, learn, and collaborate with like-minded individuals who share a passion for open-source software and the endless possibilities it offers. Together, let's dive into the world of Linux and embrace the power of freedom, customization, and innovation. Enjoy your stay and feel free to join the vibrant discussions that await you!

Rules:

  1. Stay on topic: Posts and discussions should be related to Linux, open source software, and related technologies.

  2. Be respectful: Treat fellow community members with respect and courtesy.

  3. Quality over quantity: Share informative and thought-provoking content.

  4. No spam or self-promotion: Avoid excessive self-promotion or spamming.

  5. No NSFW adult content

  6. Follow general lemmy guidelines.

founded 3 years ago
MODERATORS