security.sudo.execWheelOnly

NixOS option

Only allow members of the wheel group to execute sudo by setting the executable’s permissions accordingly. This prevents users that are not members of wheel from exploiting vulnerabilities in sudo such as CVE-2021-3156.

type: boolean
Default
false
declared in: nixos/modules/security/sudo.nixView source on NixOS/nixpkgs →