security.sudo.extraRules.*.runAs

Under which user/group the specified command is allowed to run.

A user can be specified using just the username: "foo". It is also possible to specify a user/group combination using "foo:bar" or to only allow running as a specific group with ":bar".

Type

string

Default

"ALL:ALL"

Declared

<nixpkgs/nixos/modules/security/sudo.nix>