sudo-rs: add pam.services.su-l for su -l (#431219) (8aaa86b1) · Commits · nix / nixpkgs

nixos/modules/security/sudo-rs.nix

+14 −7

Original line number	Diff line number	Diff line
		@@ -298,14 +298,21 @@ in

		environment.systemPackages = [ cfg.package ];

		security.pam.services.sudo = {
		security.pam.services = {
		su-l = {
		rootOK = true;
		forwardXAuth = true;
		logFailures = true;
		};
		sudo = {
		sshAgentAuth = true;
		usshAuth = true;
		};
		security.pam.services.sudo-i = {
		sudo-i = {
		sshAgentAuth = true;
		usshAuth = true;
		};
		};

		environment.etc.sudoers = {
		source = pkgs.runCommand "sudoers" {