operating-systems: buer: Disallow some services to being managed without password by users in the wheel group
parent
1b3c063c32
commit
0beb1139b0
10
buer.scm
10
buer.scm
|
@ -279,12 +279,10 @@
|
|||
(permit (identity ":wheel")
|
||||
(nopass? #t)
|
||||
(command "herd")
|
||||
(args (list action service))))
|
||||
`("tlp" "tor" "ipfs" "thermald" "thinkfan"
|
||||
"networking" "wpa-supplicant")
|
||||
`("doc" "stop" "start" "enable"
|
||||
"status" "restart" "disable")))
|
||||
|
||||
(args (map symbol->string
|
||||
(list action service)))))
|
||||
'(tor ipfs networking wpa-supplicant)
|
||||
'(doc stop start enable status restart disable)))
|
||||
#|Special file services|#
|
||||
(service special-files-service-type
|
||||
`(("/bin/sh" ,(file-append dash-next "/bin/dash"))
|
||||
|
|
Loading…
Reference in New Issue