diff --git a/sets/base.nix b/sets/base.nix
index 9d3dd39..25963c4 100644
--- a/sets/base.nix
+++ b/sets/base.nix
@@ -44,6 +44,9 @@
     groups.artemis.gid = config.users.users.artemis.uid;
     mutableUsers = false;
   };
+
+  security.sudo.execWheelOnly = true;
+
   systemd.extraConfig = "DefaultLimitCORE=infinity";
   security.pam.loginLimits = [{ domain = "*"; item = "core"; type = "hard"; value = "infinity"; }];
 }