christoph/flake-nixinator
1
Fork 0
Code Activity

System: Add networkmanager modify system polkit permission

Browse Source
This commit is contained in:
Christoph Urlacher
2025-06-10 23:43:47 +02:00
parent 9ba76cf934
commit 0e01f8dab5
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
system/modules/network/default.nix
View File

@ -66,7 +66,7 @@ in {
mkIf (!cfg.useNetworkManager) {text = names;}; mkIf (!cfg.useNetworkManager) {text = names;};
# Allow to enable/disable tunnels without root password # Allow to enable/disable tunnels without root password
modules.polkit.allowed-system-services = let modules.polkit.allowedSystemServices = let
vpn-services = lib.pipe cfg.wireguard-tunnels [ vpn-services = lib.pipe cfg.wireguard-tunnels [
attrNames attrNames
(map (v: "${v}.service")) (map (v: "${v}.service"))
@ -74,6 +74,11 @@ in {
in in
mkIf (!cfg.useNetworkManager) vpn-services; mkIf (!cfg.useNetworkManager) vpn-services;
modules.polkit.allowedActions = mkIf cfg.useNetworkManager [
# NOTE: List permissions by running "nmcli general permissions"
"org.freedesktop.NetworkManager.settings.modify.system"
];
# General Networking Settings # General Networking Settings
networking = { networking = {
# Gets inherited from flake in nixos mylib and passed through the module option # Gets inherited from flake in nixos mylib and passed through the module option