summaryrefslogtreecommitdiff
path: root/modules/pc/security/pam.nix
blob: e8000713a5bb57f650eda5b4a7800c7a9a33cfbc (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
{
  security.pam = {
    loginLimits = [
      {
        domain = "@wheel";
        item = "nofile";
        type = "soft";
        value = "524288";
      }
      {
        domain = "@wheel";
        item = "nofile";
        type = "hard";
        value = "1048576";
      }
    ];

    services =
      let
        ttyAudit = {
          enable = true;
          enablePattern = "*";
        };
      in
      {
        swaylock.text = "auth include login";
        gtklock.text = "auth include login";

        login = {
          inherit ttyAudit;

          setLoginUid = true;
        };

        sshd = {
          inherit ttyAudit;

          setLoginUid = true;
        };

        sudo = {
          inherit ttyAudit;

          setLoginUid = true;
        };
      };
  };
}