From 6c45e0bfa23ba13320931e4df7ec7d803dcd447e Mon Sep 17 00:00:00 2001
From: Jean-Pierre PRUNARET <jean-pierre+git@prunetwork.fr>
Date: Tue, 16 Aug 2016 20:05:02 +0200
Subject: [PATCH] autorisation de 'sudo mtr' pour tous les users

---
 public/public.nix |  1 +
 public/sudo.nix   | 17 +++++++++++++++++
 2 files changed, 18 insertions(+)
 create mode 100644 public/sudo.nix

diff --git a/public/public.nix b/public/public.nix
index c184840..2e0eaf7 100644
--- a/public/public.nix
+++ b/public/public.nix
@@ -13,6 +13,7 @@ in
     ./environment.nix
     ./localisation.nix
     #./network-ipv6.nix
+    ./sudo.nix
     ./service-haveged.nix
     ./service-monitoring.nix
     ./service-ssh.nix
diff --git a/public/sudo.nix b/public/sudo.nix
new file mode 100644
index 0000000..6b67ec7
--- /dev/null
+++ b/public/sudo.nix
@@ -0,0 +1,17 @@
+{ config, lib, pkgs, ... }:
+
+let
+  inherit (lib) mkIf mkMerge mkThenElse;
+  cfg = config.r6d.config-generator;
+  computers = config.r6d.computers;
+  profiles = config.r6d.profiles;
+in
+
+mkIf true {
+
+  # Authorisation de certaines applications par sudo sans mot de passe
+
+  security.sudo.extraConfig = ''
+  %users ALL = NOPASSWD: ${pkgs.mtr}/bin/mtr
+  '';
+}