at 24.11-pre 383 B view raw
1{ config, lib, pkgs, ... }: 2 3let 4 cfg = config.programs.udevil; 5 6in { 7 options.programs.udevil.enable = lib.mkEnableOption "udevil, to mount filesystems without password"; 8 9 config = lib.mkIf cfg.enable { 10 security.wrappers.udevil = 11 { setuid = true; 12 owner = "root"; 13 group = "root"; 14 source = "${lib.getBin pkgs.udevil}/bin/udevil"; 15 }; 16 }; 17}