colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

polyunfill: remove fusermount suid wrapper

Browse Source
This commit is contained in:
Colin 2024-05-28 04:56:14 +00:00
parent e6498ad152
commit b571f70988
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
hosts/common/polyunfill.nix
View File

@ -17,6 +17,9 @@ in
# remove a few items from /run/wrappers we don't need.
options.security.wrappers = lib.mkOption {
apply = lib.filterAttrs (name: _: !(builtins.elem name [
# from <repo:nixos/nixpkgs:nixos/modules/security/wrappers/default.nix>
"fusermount" #< only needed if you want to mount entries declared in /etc/fstab or mtab as unprivileged user
"fusermount3"
# from <repo:nixos/nixpkgs:nixos/modules/programs/shadow.nix>
"newgidmap"
"newgrp"