operating-systems: buer: Disallow some services to being managed without password by users in the wheel group
parent
1b3c063c32
commit
0beb1139b0
10
buer.scm
10
buer.scm
|
@ -279,12 +279,10 @@
|
||||||
(permit (identity ":wheel")
|
(permit (identity ":wheel")
|
||||||
(nopass? #t)
|
(nopass? #t)
|
||||||
(command "herd")
|
(command "herd")
|
||||||
(args (list action service))))
|
(args (map symbol->string
|
||||||
`("tlp" "tor" "ipfs" "thermald" "thinkfan"
|
(list action service)))))
|
||||||
"networking" "wpa-supplicant")
|
'(tor ipfs networking wpa-supplicant)
|
||||||
`("doc" "stop" "start" "enable"
|
'(doc stop start enable status restart disable)))
|
||||||
"status" "restart" "disable")))
|
|
||||||
|
|
||||||
#|Special file services|#
|
#|Special file services|#
|
||||||
(service special-files-service-type
|
(service special-files-service-type
|
||||||
`(("/bin/sh" ,(file-append dash-next "/bin/dash"))
|
`(("/bin/sh" ,(file-append dash-next "/bin/dash"))
|
||||||
|
|
Loading…
Reference in New Issue