summary refs log tree commit diff
path: root/nixos/doc/manual/release-notes
diff options
context:
space:
mode:
authornicoo <nicoo@mur.at>2023-09-07 12:46:04 +0000
committernicoo <nicoo@mur.at>2023-09-18 17:35:45 +0000
commitb1eab8ca53dca000ffb5dcb7db62685bc2948215 (patch)
tree04e83a086ccc929a990ebaac12f18ac7f69821a7 /nixos/doc/manual/release-notes
parent3a95964fd5ba6240c4d08ee9a5e76faa94c8934a (diff)
downloadnixpkgs-b1eab8ca53dca000ffb5dcb7db62685bc2948215.tar
nixpkgs-b1eab8ca53dca000ffb5dcb7db62685bc2948215.tar.gz
nixpkgs-b1eab8ca53dca000ffb5dcb7db62685bc2948215.tar.bz2
nixpkgs-b1eab8ca53dca000ffb5dcb7db62685bc2948215.tar.lz
nixpkgs-b1eab8ca53dca000ffb5dcb7db62685bc2948215.tar.xz
nixpkgs-b1eab8ca53dca000ffb5dcb7db62685bc2948215.tar.zst
nixpkgs-b1eab8ca53dca000ffb5dcb7db62685bc2948215.zip
nixos/sudo: Handle `root`'s default rule through `extraRules`
This makes things more uniform, and simplifies compatibility with sudo-rs.

Moreover, users can not inject rules before this if they need to.
Diffstat (limited to 'nixos/doc/manual/release-notes')
-rw-r--r--nixos/doc/manual/release-notes/rl-2311.section.md6
1 files changed, 6 insertions, 0 deletions
diff --git a/nixos/doc/manual/release-notes/rl-2311.section.md b/nixos/doc/manual/release-notes/rl-2311.section.md
index 2fd577864c0..98c521b1106 100644
--- a/nixos/doc/manual/release-notes/rl-2311.section.md
+++ b/nixos/doc/manual/release-notes/rl-2311.section.md
@@ -200,6 +200,12 @@
 
 - Package `pash` was removed due to being archived upstream. Use `powershell` as an alternative.
 
+- `security.sudo.extraRules` now includes `root`'s default rule, with ordering
+  priority 400. This is functionally identical for users not specifying rule
+  order, or relying on `mkBefore` and `mkAfter`, but may impact users calling
+  `mkOrder n` with n ≤ 400.
+
+
 ## Other Notable Changes {#sec-release-23.11-notable-changes}
 
 - The Cinnamon module now enables XDG desktop integration by default. If you are experiencing collisions related to xdg-desktop-portal-gtk you can safely remove `xdg.portal.extraPortals = [ pkgs.xdg-desktop-portal-gtk ];` from your NixOS configuration.