From 2c424bf878f1d76151e13f833fa7f463b1654f6f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?L=C3=A9ana=20=E6=B1=9F?= <leana.jiang+git@icloud.com>
Date: Fri, 2 Jan 2026 00:48:16 +0100
Subject: [PATCH] vanadium: doas allow framework_tool without password

---
 nix/configurations/vanadium/nixos/misc.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/nix/configurations/vanadium/nixos/misc.nix b/nix/configurations/vanadium/nixos/misc.nix
index 4d512a82..0f757beb 100644
--- a/nix/configurations/vanadium/nixos/misc.nix
+++ b/nix/configurations/vanadium/nixos/misc.nix
@@ -19,4 +19,12 @@
   # https://discourse.nixos.org/t/how-do-i-get-my-aarch64-linux-machine-to-build-x86-64-linux-extra-platforms-doesnt-seem-to-work/38106/2?u=leana8959
   boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
   nix.settings.extra-platforms = config.boot.binfmt.emulatedSystems;
+
+  security.doas.extraRules = [
+    {
+      users = [ ":wheel" ];
+      cmd = "framework_tool";
+      noPass = true;
+    }
+  ];
 }