gwg313/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: remove options causing sudo issues

Browse source
This commit is contained in:
gwg313 2026-04-21 00:45:28 -04:00
parent 96c1b1a504
commit e14744ff80
Signed by: gwg313
GPG key ID: 60FF63B4826B7400
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
modules/features/security/systemd/security-systemd-sshd.nix
View file

@ -6,7 +6,7 @@
{ ... }: { ... }:
{ {
systemd.services.sshd.serviceConfig = { systemd.services.sshd.serviceConfig = {
NoNewPrivileges = true; # NoNewPrivileges = true;
ProtectSystem = "strict"; ProtectSystem = "strict";
ProtectHome = "read-only"; ProtectHome = "read-only";
ProtectClock = true; ProtectClock = true;
@ -21,7 +21,7 @@
PrivateDevices = true; PrivateDevices = true;
RestrictNamespaces = true; RestrictNamespaces = true;
RestrictRealtime = true; RestrictRealtime = true;
RestrictSUIDSGID = true; # RestrictSUIDSGID = true;
MemoryDenyWriteExecute = true; MemoryDenyWriteExecute = true;
LockPersonality = true; LockPersonality = true;
DevicePolicy = "closed"; DevicePolicy = "closed";