diff options
| author |  sommerfeld <sommerfeld@sommerfeld.dev> | 2026-05-13 13:43:37 +0100 |
|---|---|---|
| committer | sommerfeld <sommerfeld@sommerfeld.dev> | 2026-05-13 13:43:37 +0100 |
| commit | f84adbf727add98e33135d6ef9a793e8d79b6e6b (patch) | |
| tree | e674f4b1160f90bd9e33500616eb79fd32ed9f3f | |
| parent | 763b425de7834bfbd8b840b2a63407594c9f5c6f (diff) | |
| download | dotfiles-f84adbf727add98e33135d6ef9a793e8d79b6e6b.tar.gz dotfiles-f84adbf727add98e33135d6ef9a793e8d79b6e6b.tar.bz2 dotfiles-f84adbf727add98e33135d6ef9a793e8d79b6e6b.zip | |
refactor(sudoers): drop NOPASSWD poweroff/reboot, polkit handles it
systemctl {poweroff,reboot,suspend} are authorized by polkit for the
active seat's user without a password, so the bespoke sudo rule is no
longer needed now that the power menu uses systemctl directly.
| -rw-r--r-- | etc/sudoers-rs | 3 |
1 files changed, 0 insertions, 3 deletions
diff --git a/etc/sudoers-rs b/etc/sudoers-rs index 3a75395..7fc31da 100644 --- a/etc/sudoers-rs +++ b/etc/sudoers-rs @@ -24,6 +24,3 @@ Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/bin" # Root and the wheel group can run anything (after a password prompt). root ALL=(ALL:ALL) ALL %wheel ALL=(ALL:ALL) ALL - -# Passwordless poweroff/reboot (parity with the previous doas.conf). -%wheel ALL=(ALL) NOPASSWD: /usr/bin/poweroff, /usr/bin/reboot |