security.sudo.execWheelOnly
Only allow members of the wheel group to execute sudo by
setting the executable's permissions accordingly.
This prevents users that are not members of wheel from
exploiting vulnerabilities in sudo such as CVE-2021-3156.
- Type
boolean- Default
false- Declared
- <nixpkgs/nixos/modules/security/sudo.nix>