sudo: require password

This commit is contained in:
Sridhar Ratnakumar 2025-08-30 10:36:46 -04:00
parent ca169cb782
commit 8b1202be2b

View file

@ -8,9 +8,6 @@
me = flake.config.me;
myKeys = [
me.sshKey
# vixen host key (see distributed-build.nix)
# TODO: This should be added to 'pureintent' only
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIImY2zbqe3HlPF62gSgUrJI7xY3n3NEBwRi/MkDrVjp5"
];
in
{
@ -26,9 +23,7 @@
programs.zsh.enable = lib.mkIf pkgs.stdenv.isLinux true;
# Make me a sudoer without password
security = lib.optionalAttrs pkgs.stdenv.isLinux {
sudo.execWheelOnly = true;
sudo.wheelNeedsPassword = false;
};
}