diff options
| author | seth <[email protected]> | 2023-05-08 00:21:41 -0400 |
|---|---|---|
| committer | seth <[email protected]> | 2023-05-08 00:21:41 -0400 |
| commit | 9cedd06b8589a5d39a7a85e2efe646a8edebac53 (patch) | |
| tree | 8884a1238b0586396bc403098e23e78505ab514e /modules/nixos/security.nix | |
| parent | 589c80eb1bcaf76b4a1a7e6f9cdd725fdb04e063 (diff) | |
modules: merge base and nixos
Diffstat (limited to 'modules/nixos/security.nix')
| -rw-r--r-- | modules/nixos/security.nix | 28 |
1 files changed, 0 insertions, 28 deletions
diff --git a/modules/nixos/security.nix b/modules/nixos/security.nix deleted file mode 100644 index 403cfa5..0000000 --- a/modules/nixos/security.nix +++ /dev/null @@ -1,28 +0,0 @@ -{ - lib, - pkgs, - ... -}: let - inherit (lib) mkDefault; -in { - security = { - apparmor.enable = mkDefault true; - audit.enable = mkDefault true; - auditd.enable = mkDefault true; - polkit.enable = mkDefault true; - rtkit.enable = mkDefault true; - sudo.execWheelOnly = true; - }; - - services.dbus.apparmor = mkDefault "enabled"; - - users = { - defaultUserShell = pkgs.bash; - mutableUsers = false; - }; - - nix.settings = { - allowed-users = ["root" "@wheel"]; - trusted-users = ["root"]; - }; -} |
