doas rules

hosts/hyuganatsu/default.nix

@@ -20,5 +20,13 @@
       isNormalUser = true;
     };
   };
+  security.doas.extraRules = [
+    {
+      users = ["u2h"];
+      noPass = true;
+      cmd = "rmmod";
+      args = ["wacom"];
+    }
+  ];
   services.xserver.wacom.enable = true;
 }

system/security.nix

@@ -6,6 +6,11 @@
         groups = ["wheel"];
         persist = true;
       }
+      {
+        groups = ["wheel"];
+        noPass = true;
+        cmd = "journalctl";
+      }
     ];
   };
   security.polkit.enable = true;