erwin/nixos-config
1
0
Fork 0
Code Issues 1 Pull requests Projects 1 Releases Wiki Activity Actions

heimdall: Switch to sudo-rs

Browse source
This commit is contained in:
Erwin Boskma 2024-03-07 16:35:29 +01:00
parent e279ac6b65
commit 63d110acfe
Signed by: erwin
SSH key fingerprint: SHA256:9LmFDe1C6jSrEyqxxvX8NtJBmcbB105XoqyUZF092bg
1 changed files with 11 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
machines/heimdall/configuration.nix
View file

@ -141,11 +141,18 @@
}; };
}; };
security.apparmor = { security = {
enable = true; sudo-rs = {
killUnconfinedConfinables = true; enable = true;
};
sudo.enable = false;
apparmor = {
enable = true;
killUnconfinedConfinables = true;
};
protectKernelImage = true;
}; };
security.protectKernelImage = true;
sops.defaultSopsFile = ./secrets.yaml; sops.defaultSopsFile = ./secrets.yaml;
sops.secrets = { sops.secrets = {