diff options
author | nicoo <nicoo@mur.at> | 2023-09-07 12:46:04 +0000 |
---|---|---|
committer | nicoo <nicoo@mur.at> | 2023-09-18 17:35:45 +0000 |
commit | b1eab8ca53dca000ffb5dcb7db62685bc2948215 (patch) | |
tree | 04e83a086ccc929a990ebaac12f18ac7f69821a7 /nixos/doc/manual/release-notes | |
parent | 3a95964fd5ba6240c4d08ee9a5e76faa94c8934a (diff) | |
download | nixpkgs-b1eab8ca53dca000ffb5dcb7db62685bc2948215.tar nixpkgs-b1eab8ca53dca000ffb5dcb7db62685bc2948215.tar.gz nixpkgs-b1eab8ca53dca000ffb5dcb7db62685bc2948215.tar.bz2 nixpkgs-b1eab8ca53dca000ffb5dcb7db62685bc2948215.tar.lz nixpkgs-b1eab8ca53dca000ffb5dcb7db62685bc2948215.tar.xz nixpkgs-b1eab8ca53dca000ffb5dcb7db62685bc2948215.tar.zst nixpkgs-b1eab8ca53dca000ffb5dcb7db62685bc2948215.zip |
nixos/sudo: Handle `root`'s default rule through `extraRules`
This makes things more uniform, and simplifies compatibility with sudo-rs. Moreover, users can not inject rules before this if they need to.
Diffstat (limited to 'nixos/doc/manual/release-notes')
-rw-r--r-- | nixos/doc/manual/release-notes/rl-2311.section.md | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/nixos/doc/manual/release-notes/rl-2311.section.md b/nixos/doc/manual/release-notes/rl-2311.section.md index 2fd577864c0..98c521b1106 100644 --- a/nixos/doc/manual/release-notes/rl-2311.section.md +++ b/nixos/doc/manual/release-notes/rl-2311.section.md @@ -200,6 +200,12 @@ - Package `pash` was removed due to being archived upstream. Use `powershell` as an alternative. +- `security.sudo.extraRules` now includes `root`'s default rule, with ordering + priority 400. This is functionally identical for users not specifying rule + order, or relying on `mkBefore` and `mkAfter`, but may impact users calling + `mkOrder n` with n ≤ 400. + + ## Other Notable Changes {#sec-release-23.11-notable-changes} - The Cinnamon module now enables XDG desktop integration by default. If you are experiencing collisions related to xdg-desktop-portal-gtk you can safely remove `xdg.portal.extraPortals = [ pkgs.xdg-desktop-portal-gtk ];` from your NixOS configuration. |