base/polkit: let wheel users use AUTH_KEEP_SELF for systemd actions

This commit is contained in:
h7x4
2026-05-27 14:13:36 +09:00
parent 3372712e26
commit 0e2a8ed3ed

View File

@@ -6,10 +6,13 @@ in
security.polkit.enable = true; security.polkit.enable = true;
environment.etc."polkit-1/rules.d/9-nixos-overrides.rules".text = lib.mkIf cfg.enable '' environment.etc."polkit-1/rules.d/9-nixos-overrides.rules".text = lib.mkIf cfg.enable ''
polkit.addAdminRule(function(action, subject) { polkit.addRule(function(action, subject) {
if(subject.isInGroup("wheel")) { if (
return ["unix-user:"+subject.user]; action.id.startsWith("org.freedesktop.systemd1.") &&
} subject.isInGroup("wheel")
}); ) {
return polkit.Result.AUTH_SELF_KEEP;
}
});
''; '';
} }