palo/nixos-config
palo/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

browser configure sudo

Browse source
This commit is contained in:
Ingolf Wagner 2020-10-12 22:46:55 +02:00
parent ad79c38764
commit 9e2fd423bd
No known key found for this signature in database
GPG key ID: 76BF5F1928B9618B
1 changed files with 9 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
modules/programs/browser.nix
View file

@ -203,9 +203,15 @@ in {
# add sudo rights # add sudo rights
security.sudo.extraConfig = let security.sudo.extraConfig = let
extraRules = flip mapAttrsToList cfg.configList (name: values: extraRules = flip mapAttrsToList cfg.configList (name: values:
concatStringsSep "\n" concatStringsSep "" (map (sudoUser: ''
(map (sudoUser: "${sudoUser} ALL=(${values.user}) NOPASSWD: ALL") # sudo configuration to control browser
values.sudoUsers)); ${sudoUser} ALL=(${values.user}) NOPASSWD: ALL
${sudoUser} ALL=(root) NOPASSWD: /run/current-system/sw/bin/mkdir -p ${values.home}
${sudoUser} ALL=(root) NOPASSWD: /run/current-system/sw/bin/chown -R ${values.user}\:users ${values.home}
${sudoUser} ALL=(root) NOPASSWD: /run/current-system/sw/bin/killall -9 -u ${name}
${sudoUser} ALL=(root) NOPASSWD: /run/current-system/sw/bin/rm -rf ${values.home}
${sudoUser} ALL=(root) NOPASSWD: /run/current-system/sw/bin/rm ${values.home}-lock
'') values.sudoUsers));
in lib.concatStringsSep "\n" extraRules; in lib.concatStringsSep "\n" extraRules;
# create users # create users