image-factory can be run as normal user, but it need root permission for a few operations like chmod,
mount, and umount. Since these operations cannot be secured with sudo’s wildcards, image-factory-sudo-helper was introduced to check the commands using regular expression.
image-factory-sudo-helper will take a command (including parameters) and checks if it one of the three
allowed commands:
• chmod on files or (sub-)directories in /tmp/image-factory
• mount of loop device in /tmp/image-factory
• umount in /tmp/image-factory
If the given command passes is one of the allowed commands, it will be executed. Otherwise an error mes‐
sage will be printed.