felschr/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(hardened): switch from sudo to sudo-rs

Browse source
This commit is contained in:
Felix Schröter 2025-07-21 20:57:00 +02:00
parent 2daf2e5c58
commit 331ded0ec1
Signed by: felschr
GPG key ID: 671E39E6744C807D
1 changed files with 10 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

10
system/hardened.nix
View file

@ -12,8 +12,16 @@
# @TODO hardened kernel causes Bluetooth issues # @TODO hardened kernel causes Bluetooth issues
boot.kernelPackages = lib.mkOverride 900 pkgs.linuxPackages; boot.kernelPackages = lib.mkOverride 900 pkgs.linuxPackages;
security = {
# Xbox Controller not working via Bluetooth if enabled # Xbox Controller not working via Bluetooth if enabled
security.lockKernelModules = lib.mkOverride 900 false; lockKernelModules = lib.mkOverride 900 false;
sudo.enable = false;
sudo-rs = {
enable = true;
execWheelOnly = true;
};
};
boot.loader.systemd-boot.editor = lib.mkDefault false; boot.loader.systemd-boot.editor = lib.mkDefault false;