movefasta/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-06-12 20:55:31 +03:00
Code Issues Projects Releases Packages Wiki Activity

nixos/sudo: Fix extraRules example rendering

Browse source
This commit is contained in:
Silvan Mosberger 2020-02-10 01:37:07 +01:00
parent 637bb9fa98
commit cb1f1b4260
No known key found for this signature in database
GPG key ID: E8F1E9EAD284E17D
1 changed files with 17 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

32
nixos/modules/security/sudo.nix
View file

@ -71,23 +71,25 @@ in
this is the case when configuration options are merged. this is the case when configuration options are merged.
''; '';
default = []; default = [];
example = [ example = literalExample ''
# Allow execution of any command by all users in group sudo, [
# requiring a password. # Allow execution of any command by all users in group sudo,
{ groups = [ "sudo" ]; commands = [ "ALL" ]; } # requiring a password.
{ groups = [ "sudo" ]; commands = [ "ALL" ]; }
# Allow execution of "/home/root/secret.sh" by user `backup`, `database` # Allow execution of "/home/root/secret.sh" by user `backup`, `database`
# and the group with GID `1006` without a password. # and the group with GID `1006` without a password.
{ users = [ "backup" "database" ]; groups = [ 1006 ]; { users = [ "backup" "database" ]; groups = [ 1006 ];
commands = [ { command = "/home/root/secret.sh"; options = [ "SETENV" "NOPASSWD" ]; } ]; } commands = [ { command = "/home/root/secret.sh"; options = [ "SETENV" "NOPASSWD" ]; } ]; }
# Allow all users of group `bar` to run two executables as user `foo` # Allow all users of group `bar` to run two executables as user `foo`
# with arguments being pre-set. # with arguments being pre-set.
{ groups = [ "bar" ]; runAs = "foo"; { groups = [ "bar" ]; runAs = "foo";
commands = commands =
[ "/home/baz/cmd1.sh hello-sudo" [ "/home/baz/cmd1.sh hello-sudo"
{ command = ''/home/baz/cmd2.sh ""''; options = [ "SETENV" ]; } ]; } { command = '''/home/baz/cmd2.sh ""'''; options = [ "SETENV" ]; } ]; }
]; ]
'';
type = with types; listOf (submodule { type = with types; listOf (submodule {
options = { options = {
users = mkOption { users = mkOption {