Files
pvv-nixos-config/base/services/polkit.nix
oysteikt 0e2a8ed3ed
Build topology graph / evals (push) Successful in 3m48s
Eval nix flake / evals (push) Successful in 5m2s
base/polkit: let wheel users use AUTH_KEEP_SELF for systemd actions
2026-05-27 14:13:36 +09:00

19 lines
436 B
Nix

{ config, lib, ... }:
let
cfg = config.security.polkit;
in
{
security.polkit.enable = true;
environment.etc."polkit-1/rules.d/9-nixos-overrides.rules".text = lib.mkIf cfg.enable ''
polkit.addRule(function(action, subject) {
if (
action.id.startsWith("org.freedesktop.systemd1.") &&
subject.isInGroup("wheel")
) {
return polkit.Result.AUTH_SELF_KEEP;
}
});
'';
}