public
/
nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

modules/security/sudo.nix: added 'wheelNeedsPassword' option (default: true) 

Change this setting to 'false' to allow users in the 'wheel' group to execute
commands as super user without entering a password.
This commit is contained in:
Peter Simons 2012-08-13 14:37:32 +02:00
parent 85997a6692
commit a025e848e0
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
modules/security/sudo.nix
View File

@ -25,6 +25,15 @@ in
''; '';
}; };
security.sudo.wheelNeedsPassword = mkOption {
default = true;
description =
''
Whether users of the <code>wheel</code> group can execute
commands as super user without entering a password.
'';
};
security.sudo.configFile = mkOption { security.sudo.configFile = mkOption {
# Note: if syntax errors are detected in this file, the NixOS # Note: if syntax errors are detected in this file, the NixOS
# configuration will fail to build. # configuration will fail to build.
@ -45,7 +54,7 @@ in
root ALL=(ALL) SETENV: ALL root ALL=(ALL) SETENV: ALL
# Users in the "wheel" group can do anything. # Users in the "wheel" group can do anything.
%wheel ALL=(ALL) SETENV: ALL %wheel ALL=(ALL) ${if cfg.wheelNeedsPassword then "" else "NOPASSWD: ALL, "}SETENV: ALL
''; '';
description = description =
'' ''