From 45572a0336bce7d2bf36429491a45ebb34a70a0f Mon Sep 17 00:00:00 2001 From: Alyssa Ross Date: Sun, 7 Jul 2019 18:59:54 +0000 Subject: modules/yubikey: use Yubikey for sudo via U2F --- modules/workstation/hardware/yubikey/default.nix | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'modules/workstation/hardware/yubikey/default.nix') diff --git a/modules/workstation/hardware/yubikey/default.nix b/modules/workstation/hardware/yubikey/default.nix index 23a940f2ee8a..d047246bb20d 100644 --- a/modules/workstation/hardware/yubikey/default.nix +++ b/modules/workstation/hardware/yubikey/default.nix @@ -2,4 +2,12 @@ { services.udev.packages = with pkgs; [ yubikey-personalization ]; + + security.pam.services.sudo.u2fAuth = true; + security.sudo.extraConfig = '' + Defaults timestamp_timeout=0 + ''; + + security.pam.u2f.cue = true; + security.pam.u2f.authFile = pkgs.copyPathToStore ./u2f_keys; } -- cgit 1.4.1