31 lines
642 B
Nix
31 lines
642 B
Nix
{pkgs, ...}: {
|
|
security = {
|
|
apparmor = {
|
|
enable = true;
|
|
enableCache = true;
|
|
};
|
|
audit.enable = true;
|
|
auditd.enable = true;
|
|
pam = {
|
|
services = {
|
|
passwd.enableGnomeKeyring = true;
|
|
login.enableGnomeKeyring = true;
|
|
swaylock = {};
|
|
};
|
|
u2f = {
|
|
enable = true;
|
|
authFile = "/etc/u2f_keys";
|
|
cue = true;
|
|
};
|
|
};
|
|
polkit.enable = true;
|
|
rtkit.enable = true;
|
|
sudo = {
|
|
package = pkgs.sudo.override {withInsults = true;};
|
|
extraConfig = ''
|
|
Defaults lecture="never"
|
|
'';
|
|
wheelNeedsPassword = true;
|
|
};
|
|
};
|
|
}
|