nate@nkent02$ git format-patch --subject-prefix="wrynose] [patch" wrynose
0001-sudo-fix-pam-wheel-sed-for-sudo-1.9.17p2-sudoers.patch

nate@nkent02$ cat -p 0001-sudo-fix-pam-wheel-sed-for-sudo-1.9.17p2-sudoers.patch
From 0c260c4559fe43206f9f988819eb345ca5186531 Mon Sep 17 00:00:00 2001
From: Nate Kent <nathan@otiv.ai>
Date: Thu, 18 Jun 2026 13:50:01 +0200
Subject: [wrynose] [patch] sudo: fix pam-wheel sed for sudo 1.9.17p2 sudoers

[YOCTO #16321]

In version 1.9.17p2, the line that the recipe uses to add the 'wheel'
group to the sudoers file does not exist. This updates the sed usage to
the actual line in question.

Signed-off-by: Nate Kent <nathan@otiv.ai>
Tested-by: Siva Balasubramanian <sivakumar.bs@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---
 meta/recipes-extended/sudo/sudo_1.9.17p2.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta/recipes-extended/sudo/sudo_1.9.17p2.bb b/meta/recipes-extended/sudo/sudo_1.9.17p2.bb
index 7dfa0cef6c..489c0db09d 100644
--- a/meta/recipes-extended/sudo/sudo_1.9.17p2.bb
+++ b/meta/recipes-extended/sudo/sudo_1.9.17p2.bb
@@ -37,7 +37,7 @@ do_install:append () {
        install -D -m 644 ${UNPACKDIR}/sudo.pam ${D}/${sysconfdir}/pam.d/sudo
        if ${@bb.utils.contains('PACKAGECONFIG', 'pam-wheel', 'true', 'false', d)} ; then
            echo 'auth       required     pam_wheel.so use_uid' >>${D}${sysconfdir}/pam.d/sudo
-           sed -i 's/# \(%wheel ALL=(ALL) ALL\)/\1/' ${D}${sysconfdir}/sudoers
+           sed -i 's/# \(%wheel ALL=(ALL:ALL) ALL\)/\1/' ${D}${sysconfdir}/sudoers
        fi
    fi
 

nate@nkent02$ git send-email --to openembedded-core@lists.openembedded.org 0001-sudo-fix-pam-wheel-sed-for-sudo-1.9.17p2-sudoers.patch 