···

       
11
       
 
       
    security.lockKernelModules = mkOption {

     

       
12
       
 
       
      type = types.bool;

     

       
13
       
 
       
      default = false;

     

       
14
       
-
       
      description = ''

     

       
15
       
 
       
        Disable kernel module loading once the system is fully initialised.

     

       
16
       
 
       
        Module loading is disabled until the next reboot. Problems caused

     

       
17
       
 
       
        by delayed module loading can be fixed by adding the module(s) in

     

       
18
       
-
       
        question to <option>boot.kernelModules</option>.

     

       
19
       
 
       
      '';

     

       
20
       
 
       
    };

     

       
21
       
 
       
  };

     

···

       
11
       
 
       
    security.lockKernelModules = mkOption {

     

       
12
       
 
       
      type = types.bool;

     

       
13
       
 
       
      default = false;

     

       
14
       
+
       
      description = lib.mdDoc ''

     

       
15
       
 
       
        Disable kernel module loading once the system is fully initialised.

     

       
16
       
 
       
        Module loading is disabled until the next reboot. Problems caused

     

       
17
       
 
       
        by delayed module loading can be fixed by adding the module(s) in

     

       
18
       
+
       
        question to {option}`boot.kernelModules`.

     

       
19
       
 
       
      '';

     

       
20
       
 
       
    };

     

       
21
       
 
       
  };

     

···

       
29
       
 
       
            if (subject.local) return "yes";

     

       
30
       
 
       
          });

     

       
31
       
 
       
        '';

     

       
32
       
-
       
      description =

     

       
33
       
 
       
        ''

     

       
34
       
 
       
          Any polkit rules to be added to config (in JavaScript ;-). See:

     

       
35
       
 
       
          http://www.freedesktop.org/software/polkit/docs/latest/polkit.8.html#polkit-rules

     
···

       
40
       
 
       
      type = types.listOf types.str;

     

       
41
       
 
       
      default = [ "unix-group:wheel" ];

     

       
42
       
 
       
      example = [ "unix-user:alice" "unix-group:admin" ];

     

       
43
       
-
       
      description =

     

       
44
       
 
       
        ''

     

       
45
       
 
       
          Specifies which users are considered “administrators”, for those

     

       
46
       
 
       
          actions that require the user to authenticate as an

     

       
47
       
-
       
          administrator (i.e. have an <literal>auth_admin</literal>

     

       
48
       
-
       
          value).  By default, this is all users in the <literal>wheel</literal> group.

     

       
49
       
 
       
        '';

     

       
50
       
 
       
    };

     

       
51
       
 
       


     

···

       
29
       
 
       
            if (subject.local) return "yes";

     

       
30
       
 
       
          });

     

       
31
       
 
       
        '';

     

       
32
       
+
       
      description = lib.mdDoc

     

       
33
       
 
       
        ''

     

       
34
       
 
       
          Any polkit rules to be added to config (in JavaScript ;-). See:

     

       
35
       
 
       
          http://www.freedesktop.org/software/polkit/docs/latest/polkit.8.html#polkit-rules

     
···

       
40
       
 
       
      type = types.listOf types.str;

     

       
41
       
 
       
      default = [ "unix-group:wheel" ];

     

       
42
       
 
       
      example = [ "unix-user:alice" "unix-group:admin" ];

     

       
43
       
+
       
      description = lib.mdDoc

     

       
44
       
 
       
        ''

     

       
45
       
 
       
          Specifies which users are considered “administrators”, for those

     

       
46
       
 
       
          actions that require the user to authenticate as an

     

       
47
       
+
       
          administrator (i.e. have an `auth_admin`

     

       
48
       
+
       
          value).  By default, this is all users in the `wheel` group.

     

       
49
       
 
       
        '';

     

       
50
       
 
       
    };

     

       
51