From be2421e3dc248e8e190745d44876544200fb9629 Mon Sep 17 00:00:00 2001
From: Richie Cahill <Richie@tmmworkshop.com>
Date: Wed, 11 Jun 2025 20:48:12 -0400
Subject: [PATCH] testing sudo-rs

---
 common/global/default.nix | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/common/global/default.nix b/common/global/default.nix
index 1f1e3d7..4487cae 100644
--- a/common/global/default.nix
+++ b/common/global/default.nix
@@ -56,7 +56,13 @@
 
   programs.zsh.enable = true;
 
-  security.auditd.enable = lib.mkDefault true;
+  security = {
+    auditd.enable = lib.mkDefault true;
+    sudo-rs = {
+      enable = true;
+      execWheelOnly = true;
+    };
+  };
 
   users.mutableUsers = lib.mkDefault false;