Red Hat Bugzilla – Bug 969373
'%wheel ALL=(ALL) ALL' enabled by default in RHEL-7
Last modified: 2015-03-02 00:27:49 EST
'%wheel ALL=(ALL) ALL' enabled by default. In RHEL-6 it was commented out. So it seem to me like regression.
Was just about to open a bug on this reversion of bug #656873 when I saw this was still open. Note that members of group wheel can still 'pkexec bash' to gain root through PolicyKit, and I think that's by design to enable "administrative users". Additional historic discussion in bug #462161.
I prefer the current Fedora behaviour.
If admin (wheel) users can get root anyway with pkexec
why not just allow them sudo by default?
This BZ is now considered as NOTABUG as the "%wheel enabled by default" behaviour is expected and required by anaconda and the "Make user an administrator" feature. Please read the comments and/or make complaints in rhbz#994623.