Fix CVE-2021-3156

This commit is contained in:
Katherina Walshe-Grey 2024-06-19 19:39:00 +01:00
parent 2bcb07ee60
commit 6fc5a2b1ea
2 changed files with 6 additions and 0 deletions

5
common/sudo.nix Normal file
View file

@ -0,0 +1,5 @@
{ config, lib, pkgs,... }:
{
security.sudo.execWheelOnly = true;
}