diff --git a/hosts/hyuganatsu/default.nix b/hosts/hyuganatsu/default.nix
index 290a38b..b2959c1 100644
--- a/hosts/hyuganatsu/default.nix
+++ b/hosts/hyuganatsu/default.nix
@@ -20,5 +20,13 @@
       isNormalUser = true;
     };
   };
+  security.doas.extraRules = [
+    {
+      users = ["u2h"];
+      noPass = true;
+      cmd = "rmmod";
+      args = ["wacom"];
+    }
+  ];
   services.xserver.wacom.enable = true;
 }
diff --git a/system/security.nix b/system/security.nix
index 5ca8730..5510969 100644
--- a/system/security.nix
+++ b/system/security.nix
@@ -6,6 +6,11 @@
         groups = ["wheel"];
         persist = true;
       }
+      {
+        groups = ["wheel"];
+        noPass = true;
+        cmd = "journalctl";
+      }
     ];
   };
   security.polkit.enable = true;