operating-systems: buer: Disallow some services to being managed without password by users in the wheel group

pull/1/head
Luis Guilherme Coelho 2023-11-28 09:17:41 -03:00
parent 1b3c063c32
commit 0beb1139b0
No known key found for this signature in database
GPG Key ID: 1F2E76ACE3F531C8
1 changed files with 4 additions and 6 deletions

View File

@ -279,12 +279,10 @@
(permit (identity ":wheel")
(nopass? #t)
(command "herd")
(args (list action service))))
`("tlp" "tor" "ipfs" "thermald" "thinkfan"
"networking" "wpa-supplicant")
`("doc" "stop" "start" "enable"
"status" "restart" "disable")))
(args (map symbol->string
(list action service)))))
'(tor ipfs networking wpa-supplicant)
'(doc stop start enable status restart disable)))
#|Special file services|#
(service special-files-service-type
`(("/bin/sh" ,(file-append dash-next "/bin/dash"))