mirror of
https://github.com/nix-community/srvos.git
synced 2024-08-17 01:40:26 +03:00
sudo: drop explicit sudo enable (#304)
This makes it harder to replace sudo with sudo-rs
This commit is contained in:
parent
a0d29fdb2f
commit
533a8681bb
@ -1,6 +1,4 @@
|
||||
{
|
||||
# Allow sudo from the @wheel group
|
||||
security.sudo.enable = true;
|
||||
# Only allow members of the wheel group to execute sudo by setting the executable’s permissions accordingly. This prevents users that are not members of wheel from exploiting vulnerabilities in sudo such as CVE-2021-3156.
|
||||
security.sudo.execWheelOnly = true;
|
||||
# Don't lecture the user. Less mutable state.
|
||||
|
Loading…
Reference in New Issue
Block a user