b12f/nixpkgs
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

nixos/sudo: Refactor checks for Todd C. Miller's implemetation

Browse source
This commit is contained in:
nicoo 2023-09-07 12:08:28 +00:00
parent f5aadb56be
commit 8b9e867ac8
1 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
nixos/modules/security/sudo.nix
View file

@ -4,13 +4,15 @@ with lib;
let
inherit (pkgs) sudo;
cfg = config.security.sudo;
enableSSHAgentAuth =
with config.security;
pam.enableSSHAgentAuth && pam.sudo.sshAgentAuth;
inherit (pkgs) sudo;
usingMillersSudo = cfg.package.pname == sudo.pname;
toUserString = user: if (isInt user) then "#${toString user}" else "${user}";
toGroupString = group: if (isInt group) then "%#${toString group}" else "%${group}";
@ -197,8 +199,8 @@ in
config = mkIf cfg.enable {
assertions = [
{ assertion = cfg.package.pname != "sudo-rs";
message = "The NixOS `sudo` module does not work with `sudo-rs` yet."; }
{ assertion = usingMillersSudo;
message = "The NixOS `sudo` module does not yet work with other implementations."; }
];
# We `mkOrder 600` so that the default rule shows up first, but there is