nixos/sudo: Make the default rules' options configurable

This commit is contained in:
nicoo 2023-09-07 12:50:48 +00:00
parent 93011e31bd
commit 1852b67bc6

View File

@ -32,6 +32,15 @@ in
options.security.sudo = {
defaultOptions = mkOption {
type = with types; listOf str;
default = [ "SETENV" ];
description = mdDoc ''
Options used for the default rules, granting `root` and the
`wheel` group permission to run any command as any user.
'';
};
enable = mkEnableOption (mdDoc ''
the {command}`sudo` command, which allows non-root users to execute commands as root.
'');
@ -188,7 +197,7 @@ in
inherit users groups;
commands = [ {
command = "ALL";
options = opts ++ [ "SETENV" ];
options = opts ++ cfg.defaultOptions;
} ];
} ];
in mkMerge [