colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

polyunfill: disable dbus-daemon-launch-helper suid wrapper

Browse Source
This commit is contained in:
Colin
2024-05-28 05:14:06 +00:00
parent ae544c0649
commit bea1fd95e5
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
hosts/common/polyunfill.nix
View File

@@ -17,6 +17,8 @@ in
# remove a few items from /run/wrappers we don't need. # remove a few items from /run/wrappers we don't need.
options.security.wrappers = lib.mkOption { options.security.wrappers = lib.mkOption {
apply = lib.filterAttrs (name: _: !(builtins.elem name [ apply = lib.filterAttrs (name: _: !(builtins.elem name [
# from <repo:nixos/nixpkgs:nixos/modules/services/system/dbus.nix>
"dbus-daemon-launch-helper"
# from <repo:nixos/nixpkgs:nixos/modules/security/wrappers/default.nix> # from <repo:nixos/nixpkgs:nixos/modules/security/wrappers/default.nix>
"fusermount" #< only needed if you want to mount entries declared in /etc/fstab or mtab as unprivileged user "fusermount" #< only needed if you want to mount entries declared in /etc/fstab or mtab as unprivileged user
"fusermount3" "fusermount3"