- the yubikey is a u2f usb device, so usb abstraction is required - the authentication with yubikey against sudo happens as challenge response, which is why rw on the challenge file is required - the elevator first checks whether a .yubico folder exists, which is why reading the folder (but not the files within) is required |
||
|---|---|---|
| .. | ||
| abstractions | ||
| groups | ||
| profiles-a-f | ||
| profiles-g-l | ||
| profiles-m-r | ||
| profiles-s-z | ||
| tunables | ||