at master 383 B view raw
1{ 2 config, 3 lib, 4 pkgs, 5 ... 6}: 7 8let 9 cfg = config.programs.udevil; 10 11in 12{ 13 options.programs.udevil.enable = lib.mkEnableOption "udevil, to mount filesystems without password"; 14 15 config = lib.mkIf cfg.enable { 16 security.wrappers.udevil = { 17 setuid = true; 18 owner = "root"; 19 group = "root"; 20 source = "${lib.getBin pkgs.udevil}/bin/udevil"; 21 }; 22 }; 23}