colin/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos: make setgid wrappers root-owned

Browse Source
This commit is contained in:
rnhmjoj 2021-10-03 11:43:13 +02:00
parent 378d2c5dce
commit 31790c81dc
No known key found for this signature in database
GPG Key ID: BFBAF4C975F76450
5 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nixos/modules/programs/ccache.nix
View File

@ -28,7 +28,7 @@ in {
# "nix-ccache --show-stats" and "nix-ccache --clear"
security.wrappers.nix-ccache = {
owner = "nobody";
owner = "root";
group = "nixbld";
setuid = false;
setgid = true;

2
nixos/modules/programs/mosh.nix
View File

@ -33,7 +33,7 @@ in
security.wrappers = mkIf cfg.withUtempter {
utempter = {
source = "${pkgs.libutempter}/lib/utempter/utempter";
owner = "nobody";
owner = "root";
group = "utmp";
setuid = false;
setgid = true;

2
nixos/modules/services/mail/opensmtpd.nix
View File

@ -103,7 +103,7 @@ in {
};
security.wrappers.smtpctl = {
owner = "nobody";
owner = "root";
group = "smtpq";
setuid = false;
setgid = true;

8
nixos/modules/services/mail/postfix.nix
View File

@ -673,7 +673,7 @@ in
services.mail.sendmailSetuidWrapper = mkIf config.services.postfix.setSendmail {
program = "sendmail";
source = "${pkgs.postfix}/bin/sendmail";
owner = "nobody";
owner = "root";
group = setgidGroup;
setuid = false;
setgid = true;
@ -682,7 +682,7 @@ in
security.wrappers.mailq = {
program = "mailq";
source = "${pkgs.postfix}/bin/mailq";
owner = "nobody";
owner = "root";
group = setgidGroup;
setuid = false;
setgid = true;
@ -691,7 +691,7 @@ in
security.wrappers.postqueue = {
program = "postqueue";
source = "${pkgs.postfix}/bin/postqueue";
owner = "nobody";
owner = "root";
group = setgidGroup;
setuid = false;
setgid = true;
@ -700,7 +700,7 @@ in
security.wrappers.postdrop = {
program = "postdrop";
source = "${pkgs.postfix}/bin/postdrop";
owner = "nobody";
owner = "root";
group = setgidGroup;
setuid = false;
setgid = true;

2
nixos/modules/services/x11/desktop-managers/cde.nix
View File

@ -50,7 +50,7 @@ in {
security.wrappers = {
dtmail = {
setgid = true;
owner = "nobody";
owner = "root";
group = "mail";
source = "${pkgs.cdesktopenv}/bin/dtmail";
};