erwin/nixos-config
1
0
Fork 0
Code Issues 1 Pull requests Projects 1 Releases Wiki Activity Actions

heimdall: Switch to sudo-rs

Browse source
This commit is contained in:
Erwin Boskma 2024-03-07 16:35:29 +01:00
parent e279ac6b65
commit 63d110acfe
Signed by: erwin
SSH key fingerprint: SHA256:9LmFDe1C6jSrEyqxxvX8NtJBmcbB105XoqyUZF092bg
1 changed files with 11 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
machines/heimdall/configuration.nix
View file

@ -141,11 +141,18 @@
};
};
security.apparmor = {
enable = true;
killUnconfinedConfinables = true;
security = {
sudo-rs = {
enable = true;
};
sudo.enable = false;
apparmor = {
enable = true;
killUnconfinedConfinables = true;
};
protectKernelImage = true;
};
security.protectKernelImage = true;
sops.defaultSopsFile = ./secrets.yaml;
sops.secrets = {