kyra(hardening): sudo -> sudo-rs

Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
This commit is contained in:
s0me1newithhand7s 2026-05-03 15:48:57 +03:00
parent 59647629a8
commit 8c03fdb04a
2 changed files with 16 additions and 0 deletions

View file

@ -0,0 +1,9 @@
_: {
security = {
sudo-rs = {
enable = true;
wheelNeedsPassword = true;
execWheelOnly = true;
};
};
}

7
kyra/security/sudo.nix Normal file
View file

@ -0,0 +1,7 @@
{lib, ...}: {
security = {
sudo = {
enable = lib.mkDefault false;
};
};
}