···

       
100
       
100
       
 
       
        chgpasswd = { rootOK = true; };

     

       
101
       
101
       
 
       
      };

     

       
102
       
102
       
 
       


     

       
103
       
103
       
-
       
    security.setuidPrograms = [ "passwd" "chfn" "su" "newgrp"

     

       
103
       
103
       
+
       
    security.setuidPrograms = [ "passwd" "chfn" "su" "sg" "newgrp"

     

       
104
       
104
       
 
       
      "newuidmap" "newgidmap"  # new in shadow 4.2.x

     

       
105
       
105
       
 
       
      ];

     

       
106
       
106
       
 
       


     

···

       
77
       
77
       
 
       
        root        ALL=(ALL) SETENV: ALL

     

       
78
       
78
       
 
       


     

       
79
       
79
       
 
       
        # Users in the "wheel" group can do anything.

     

       
80
       
80
       
-
       
        %wheel      ALL=(ALL) ${if cfg.wheelNeedsPassword then "" else "NOPASSWD: ALL, "}SETENV: ALL

     

       
80
       
80
       
+
       
        %wheel      ALL=(ALL:ALL) ${if cfg.wheelNeedsPassword then "" else "NOPASSWD: ALL, "}SETENV: ALL

     

       
81
       
81
       
 
       
        ${cfg.extraConfig}

     

       
82
       
82
       
 
       
      '';

     

       
83
       
83