about summary refs log tree commit diff
path: root/nixos/modules
diff options
context:
space:
mode:
authorworldofpeace <worldofpeace@protonmail.ch>2019-12-10 20:24:23 -0500
committerGitHub <noreply@github.com>2019-12-10 20:24:23 -0500
commit50295a12011334743defec979aff1d1789600f58 (patch)
treebbd595e571f9c6caf86917b27c212e3b876a10fc /nixos/modules
parent63f66812bd263f96ec3c335b4160d8b2a2fe69ad (diff)
parentefc1c027ad6f2c0b31416c876dcf282539d45ea7 (diff)
downloadnixlib-50295a12011334743defec979aff1d1789600f58.tar
nixlib-50295a12011334743defec979aff1d1789600f58.tar.gz
nixlib-50295a12011334743defec979aff1d1789600f58.tar.bz2
nixlib-50295a12011334743defec979aff1d1789600f58.tar.lz
nixlib-50295a12011334743defec979aff1d1789600f58.tar.xz
nixlib-50295a12011334743defec979aff1d1789600f58.tar.zst
nixlib-50295a12011334743defec979aff1d1789600f58.zip
Merge pull request #75343 from worldofpeace/polkit-no-root-admin
nixos/polkit: remove root from adminIdentities
Diffstat (limited to 'nixos/modules')
-rw-r--r--nixos/modules/security/polkit.nix5
1 files changed, 2 insertions, 3 deletions
diff --git a/nixos/modules/security/polkit.nix b/nixos/modules/security/polkit.nix
index f2b2df4004cb..a6724bd75832 100644
--- a/nixos/modules/security/polkit.nix
+++ b/nixos/modules/security/polkit.nix
@@ -42,15 +42,14 @@ in
 
     security.polkit.adminIdentities = mkOption {
       type = types.listOf types.str;
-      default = [ "unix-user:0" "unix-group:wheel" ];
+      default = [ "unix-group:wheel" ];
       example = [ "unix-user:alice" "unix-group:admin" ];
       description =
         ''
           Specifies which users are considered “administrators”, for those
           actions that require the user to authenticate as an
           administrator (i.e. have an <literal>auth_admin</literal>
-          value).  By default, this is the <literal>root</literal>
-          user and all users in the <literal>wheel</literal> group.
+          value).  By default, this is all users in the <literal>wheel</literal> group.
         '';
     };