- Date (UTC): 2026-02-06T13:19:12Z
- Host: drg-k8s
- Change: Added temporary sudoers drop-in granting ax_julian NOPASSWD:ALL.
- Sudoers file: /etc/sudoers.d/zz-codex-temp-nopasswd-all
- Auto-rollback: systemd timer codex-sudo-rollback.timer scheduled at creation time.
Codex required temporary full sudo to complete troubleshooting/operations.
Full root access without password for the user during the window.
- Automatic: codex-sudo-rollback.timer
- Manual immediate rollback:
- rm -f /etc/sudoers.d/zz-codex-temp-nopasswd-all
- Optional: systemctl stop codex-sudo-rollback.timer
Replace with least-privilege sudoers entries for the exact required commands.