harald/nixcfg
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

feat: Require password for sudo wheel users

Browse source 
The default value for `wheelNeedsPassword` has been changed to `true` in `base/default.nix`. The redundant entry in `gui/default.nix` setting `wheelNeedsPassword` to `true` was removed as it is now enforced by the base module.
This commit is contained in:
Harald Hoyer 2024-06-25 11:03:16 +02:00
parent 1033d30619
commit a6460fede4
2 changed files with 1 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
modules/nixos/services/base/default.nix
View file

@ -114,7 +114,7 @@ in
tpm2.abrmd.enable = lib.mkDefault true;
sudo = {
enable = true;
wheelNeedsPassword = lib.mkDefault false;
wheelNeedsPassword = lib.mkDefault true;
};
};

1
modules/nixos/services/gui/default.nix
View file

@ -60,7 +60,6 @@ in
hardware.pulseaudio.enable = false;
security.rtkit.enable = true;
security.sudo.wheelNeedsPassword = true;
programs.gnupg.agent = {
enable = true;