See T13704. Operational interventions required by Ubuntu 26:
```
$ sudo apt update-alternatives --config sudo
# Select sudo.ws.
$ sudo vipw -s
# Change "!" to "*" for user `dweller`.
$ sudo systemctl edit apache2.service
```
```
[Service]
InaccessiblePaths=
InaccessiblePaths=/boot
InaccessiblePaths=/root
InaccessiblePaths=-/etc/ssh
InaccessiblePaths=-/etc/apt
InaccessiblePaths=-/etc/.git
InaccessiblePaths=-/etc/.svn
```
```
$ sudo systemctl daemon-reload
$ sudo systemctl restart apache2.service
```
These address:
- The default `sudo` is now a Rust implementation which does not support `-E`.
- User accounts are getting `!` in `/etc/shadow` when created with `adduser --disabled-password`, and the VCS `sshd` is rejecting these.
- Apache is being forbidden from reading `/etc/sudoers` and related paths, which prevents it from using `sudo`.