1{ 2 security = { 3 sudo.enable = false; 4 5 sudo-rs = { 6 enable = true; 7 8 execWheelOnly = true; 9 wheelNeedsPassword = true; 10 }; 11 }; 12}