HASH 8fdab662c77a
DATE 2025-04-17
SUBJECT darwin: move sudo options not available to darwin to nixos modules
FILES 2 CHANGED
HASH 8fdab662c77a
DATE 2025-04-17
SUBJECT darwin: move sudo options not
available to darwin to nixos modules
FILES 2 CHANGED
┌─ modules/common/base/sudo.nix ─────────────────────────────────────────────┐
│ diff --git a/modules/common/base/sudo.nix b/modules/common/base/sudo.nix │
│ index 36dd393..e19d483 100644 │
│ --- a/modules/common/base/sudo.nix │
│ +++ b/modules/common/base/sudo.nix │
│ @@ -1,26 +1,11 @@ │
│ { │
│ - pkgs, │
│ - lib, │
│ - ... │
│ -}: let │
│ - inherit (pkgs.stdenv) isLinux; │
│ - inherit (lib) mkMerge mkIf; │
│ -in { │
│ security = { │
│ - sudo = mkMerge [ │
│ - { │
│ - extraConfig = '' │
│ - Defaults pwfeedback # password feedback │
│ - Defaults lecture = never # disable warning message │
│ - Defaults timestamp_timeout=10 # set sudo timeout to 10 minutes │
│ - ''; │
│ - } │
│ - (mkIf isLinux { │
│ - # allow wheel user to execute sudo without a password │
│ - wheelNeedsPassword = false; │
│ - # only allow users in the wheel access to sudo │
│ - execWheelOnly = true; │
│ - }) │
│ - ]; │
│ + sudo = { │
│ + extraConfig = '' │
│ + Defaults pwfeedback # password feedback │
│ + Defaults lecture = never # disable warning message │
│ + Defaults timestamp_timeout=10 # set sudo timeout to 10 minutes │
│ + ''; │
│ + }; │
│ }; │
│ } │
└────────────────────────────────────────────────────────────────────────────────────┘
┌─ modules/common/base/sudo.nix ───────┐
│ diff --git a/modules/common/base/sudo.nix b/ │
│ modules/common/base/sudo.nix │
│ index 36dd393..e19d483 100644 │
│ --- a/modules/common/base/sudo.nix │
│ +++ b/modules/common/base/sudo.nix │
│ @@ -1,26 +1,11 @@ │
│ { │
│ - pkgs, │
│ - lib, │
│ - ... │
│ -}: let │
│ - inherit (pkgs.stdenv) isLinux; │
│ - inherit (lib) mkMerge mkIf; │
│ -in { │
│ security = { │
│ - sudo = mkMerge [ │
│ - { │
│ - extraConfig = '' │
│ - Defaults pwfeedback # password fe │
│ edback │
│ - Defaults lecture = never # disabl │
│ e warning message │
│ - Defaults timestamp_timeout=10 # s │
│ et sudo timeout to 10 minutes │
│ - ''; │
│ - } │
│ - (mkIf isLinux { │
│ - # allow wheel user to execute sudo │
│ without a password │
│ - wheelNeedsPassword = false; │
│ - # only allow users in the wheel acc │
│ ess to sudo │
│ - execWheelOnly = true; │
│ - }) │
│ - ]; │
│ + sudo = { │
│ + extraConfig = '' │
│ + Defaults pwfeedback # password feed │
│ back │
│ + Defaults lecture = never # disable │
│ warning message │
│ + Defaults timestamp_timeout=10 # set │
│ sudo timeout to 10 minutes │
│ + ''; │
│ + }; │
│ }; │
│ } │
└──────────────────────────────────────────────┘
┌─ modules/nixos/base/security/sudo.nix ─────────────────────────────────────┐
│ diff --git a/modules/nixos/base/security/sudo.nix b/modules/nixos/base/security/su │
│ do.nix │
│ new file mode 100644 │
│ index 0000000..68421ad │
│ --- /dev/null │
│ +++ b/modules/nixos/base/security/sudo.nix │
│ @@ -0,0 +1,8 @@ │
│ +{ │
│ + security.sudo = { │
│ + # allow wheel user to execute sudo without a password │
│ + wheelNeedsPassword = false; │
│ + # only allow users in the wheel access to sudo │
│ + execWheelOnly = true; │
│ + }; │
│ +} │
└────────────────────────────────────────────────────────────────────────────────────┘
┌─ .../nixos/base/security/sudo.nix ───┐
│ diff --git a/modules/nixos/base/security/sud │
│ o.nix b/modules/nixos/base/security/sudo.nix │
│ new file mode 100644 │
│ index 0000000..68421ad │
│ --- /dev/null │
│ +++ b/modules/nixos/base/security/sudo.nix │
│ @@ -0,0 +1,8 @@ │
│ +{ │
│ + security.sudo = { │
│ + # allow wheel user to execute sudo with │
│ out a password │
│ + wheelNeedsPassword = false; │
│ + # only allow users in the wheel access │
│ to sudo │
│ + execWheelOnly = true; │
│ + }; │
│ +} │
└──────────────────────────────────────────────┘
[ BACK TO LOG ]
──────────────────────────────────────────────────────────────────────────────────────
OOKNET
────────────────────────────────────────────────
OOKNET