utilisation de slock sans sudo -> wrapper setuid

public/app-securite.nix

@@ -18,4 +18,5 @@ mkIf profiles.isDesktop {
     slock           # vérouiller l''écran. "cannot disable the out-of-memory killer for this process (make sure to suid or sgid slock)" --> en root
     yubikey-personalization-gui # utilisation de la clef Yubikey
   ];
+  security.setuidPrograms = [ "slock" ];
 }

public/sudo.nix

@@ -13,5 +13,6 @@ mkIf true {
 
   security.sudo.extraConfig = ''
   %users ALL = NOPASSWD: ${pkgs.mtr}/bin/mtr
+  %users ALL = NOPASSWD: ${pkgs.slock}/bin/slock
   '';
 }