From 15677e4eb80f19d360f3e63c26123c0e4c5b11bd Mon Sep 17 00:00:00 2001
From: Tootbrute <tootbrute@tutanota.com>
Date: Thu, 19 Jun 2025 11:00:54 +0800
Subject: [PATCH] add sudo-rf

---
 configuration.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/configuration.nix b/configuration.nix
index 0632b4e..38e513c 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -50,8 +50,11 @@
   networking.hostName = "greynix"; # Define your hostname.
   networking.networkmanager.enable = true;
 
+  # Sudo options
   # Disable sudo password for the wheel group
   security.sudo.wheelNeedsPassword = false;
+  #  Enable sudo-rs for better security (memory safe, written in Rust).
+  security.sudo-rs.enable = true;
 
   # Set your time zone.
   time.timeZone = "Asia/Taipei";