From 991ecf13604918754e96b9fde650d300a9c3be35 Mon Sep 17 00:00:00 2001
From: Artemis Tosini <me@artem.ist>
Date: Thu, 27 Jan 2022 16:19:56 +0000
Subject: [PATCH] Set sudo to wheel only

---
 sets/base.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/sets/base.nix b/sets/base.nix
index 9d3dd39..25963c4 100644
--- a/sets/base.nix
+++ b/sets/base.nix
@@ -44,6 +44,9 @@
     groups.artemis.gid = config.users.users.artemis.uid;
     mutableUsers = false;
   };
+
+  security.sudo.execWheelOnly = true;
+
   systemd.extraConfig = "DefaultLimitCORE=infinity";
   security.pam.loginLimits = [{ domain = "*"; item = "core"; type = "hard"; value = "infinity"; }];
 }