Move to sudo-rs

2025-03-13 22:22:02 -04:00 · 2025-03-13 22:22:02 -04:00 · 6b3eb520d1
commit 6b3eb520d1
parent adeb1a50ca
1 changed files with 4 additions and 14 deletions
--- a/modules/system/settings/security/privilege/default.nix
+++ b/modules/system/settings/security/privilege/default.nix
@ -1,17 +1,7 @@
-{ pkgs, ... }:
+{ ... }:
 {
-  security = {
-    sudo.enable = false;
-    doas = {
-      enable = true;
-      extraRules = [
-        { # Specify a timeout period and keep environment variables
-          groups = [ "wheel" ];
-          keepEnv = true;
-          persist = true;
-        }
-      ];
-    };
+  security.sudo-rs = {
+    enable = true;
+    execWheelOnly = true;
  };
-  environment.systemPackages = with pkgs; [ doas-sudo-shim ];
 }