youthlic/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

security(sudo): Use sudo-rs instead of sudo since CVE-2025-32463

Browse source
This commit is contained in:
ulic-youthlic 2025-07-02 13:57:46 +08:00
parent 9e7124071b
commit 119897a545
Signed by: youthlic
GPG key ID: 63E86C3C14A0D721
2 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
nixos/modules/programs/default.nix
View file

@ -27,5 +27,6 @@
./wshowkeys.nix
./bash.nix
./obs.nix
./sudo-rs.nix
];
}

7
nixos/modules/programs/sudo-rs.nix Normal file
View file

@ -0,0 +1,7 @@
{
security.sudo-rs = {
enable = true;
execWheelOnly = true;
wheelNeedsPassword = true;
};
}