teutat3s/os
2
0
Fork 0
forked from pub-solar/os
Code Pull requests Activity

neo: needs polkit rules for yubikey

Browse source
This commit is contained in:
teutat3s 2025-03-10 23:20:40 +01:00 • committed by teutat3s
parent dc7cb7e273
commit 47d52d384c
Signed by: teutat3s
GPG key ID: 4FA1D3FA524F22C1
1 changed files with 15 additions and 0 deletions

15
hosts/neo/neo.nix
View file

@ -39,6 +39,21 @@ in
networking.hostName = "neo"; # Define your hostname.
services.fstrim.enable = true;
security.polkit.extraConfig = ''
polkit.addRule(function(action, subject) {
if (action.id == "org.debian.pcsc-lite.access_pcsc" &&
subject.user == "teutat3s") {
return polkit.Result.YES;
}
});
polkit.addRule(function(action, subject) {
if (action.id == "org.debian.pcsc-lite.access_card" &&
action.lookup("reader") == 'Yubico YubiKey OTP+FIDO+CCID 00 00' &&
subject.user == "teutat3s") {
return polkit.Result.YES; }
});
'';
home-manager =
pkgs.lib.setAttrByPath