Patch /etc/sudoers on Archlinux

fixes: QubesOS/qubes-issues#9395

archlinux/PKGBUILD.in

@@ -119,6 +119,9 @@ package_qubes-vm-core() {
     install -m 0755 "package-managers/upgrades-installed-check" "${pkgdir}/usr/lib/qubes/"
     install -m 0755 "package-managers/upgrades-status-notify" "${pkgdir}/usr/lib/qubes/"
 
+    # Patch /etc/sudoers for Qubes
+    install -m 644 "archlinux/PKGBUILD.qubes-fix-sudo.hook" "${pkgdir}/usr/share/libalpm/hooks/qubes-fix-sudo.hook"
+
     # Archlinux specific: enable autologin on tty1
     mkdir -p "$pkgdir/etc/systemd/system/[email protected]/"
     cat <<EOF > "$pkgdir/etc/systemd/system/[email protected]/autologin.conf"

archlinux/PKGBUILD.qubes-fix-sudo.hook

@@ -0,0 +1,11 @@
+[Trigger]
+Operation = Install
+Operation = Upgrade
+Type = Package
+Target = sudo
+
+[Action]
+Description = Patching sudo config file for Qubes...
+Depends = sudo
+When = PostTransaction
+Exec = /usr/bin/sed -e '/^Defaults secure_path/s/^/# /g' -i /etc/sudoers