gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/sudo: Generate sudo-i PAM config for interactive use of sudo-rs

Browse Source
This commit is contained in:
nicoo
2023-09-13 01:17:09 +00:00
parent 7b5b3f5124
commit d63eb55e81
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
nixos/modules/security/sudo.nix
View File

@@ -4,7 +4,7 @@ with lib;
let let
inherit (pkgs) sudo; inherit (pkgs) sudo sudo-rs;
cfg = config.security.sudo; cfg = config.security.sudo;
@@ -13,6 +13,7 @@ let
pam.enableSSHAgentAuth && pam.sudo.sshAgentAuth; pam.enableSSHAgentAuth && pam.sudo.sshAgentAuth;
usingMillersSudo = cfg.package.pname == sudo.pname; usingMillersSudo = cfg.package.pname == sudo.pname;
usingSudoRs = cfg.package.pname == sudo-rs.pname;
toUserString = user: if (isInt user) then "#${toString user}" else "${user}"; toUserString = user: if (isInt user) then "#${toString user}" else "${user}";
toGroupString = group: if (isInt group) then "%#${toString group}" else "%${group}"; toGroupString = group: if (isInt group) then "%#${toString group}" else "%${group}";
@@ -274,6 +275,8 @@ in
environment.systemPackages = [ sudo ]; environment.systemPackages = [ sudo ];
security.pam.services.sudo = { sshAgentAuth = true; usshAuth = true; }; security.pam.services.sudo = { sshAgentAuth = true; usshAuth = true; };
security.pam.services.sudo-i = mkIf usingSudoRs
{ sshAgentAuth = true; usshAuth = true; };
environment.etc.sudoers = environment.etc.sudoers =
{ source = { source =