mirror of
https://github.com/ilyakooo0/nixpkgs.git
synced 2024-12-26 04:43:09 +03:00
nixos/doas: default rule should be first
In /etc/doas.conf, the last-matched rule will override all previously-matched rules. Thus, make the default rule show up first (but still allow some wiggle room for a user to `mkBefore` it), before any user-defined rules.
This commit is contained in:
parent
f798f07619
commit
01b645e872
@ -223,7 +223,7 @@ in
|
|||||||
|
|
||||||
config = mkIf cfg.enable {
|
config = mkIf cfg.enable {
|
||||||
|
|
||||||
security.doas.extraRules = [
|
security.doas.extraRules = mkOrder 600 [
|
||||||
{
|
{
|
||||||
groups = [ "wheel" ];
|
groups = [ "wheel" ];
|
||||||
noPass = !cfg.wheelNeedsPassword;
|
noPass = !cfg.wheelNeedsPassword;
|
||||||
|
Loading…
Reference in New Issue
Block a user