colin/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #140359 from rnhmjoj/setgid-nobody

Browse Source 
nixos: make setgid wrappers root-owned
This commit is contained in:
Michele Guerini Rocco 2021-10-06 08:36:35 +02:00 committed by GitHub
commit e99b3f242c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
5 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nixos/modules/programs/ccache.nix
View File

@ -28,7 +28,7 @@ in {
# "nix-ccache --show-stats" and "nix-ccache --clear"
security.wrappers.nix-ccache = {
owner = "nobody";
owner = "root";
group = "nixbld";
setuid = false;
setgid = true;

2
nixos/modules/programs/mosh.nix
View File

@ -33,7 +33,7 @@ in
security.wrappers = mkIf cfg.withUtempter {
utempter = {
source = "${pkgs.libutempter}/lib/utempter/utempter";
owner = "nobody";
owner = "root";
group = "utmp";
setuid = false;
setgid = true;

2
nixos/modules/services/mail/opensmtpd.nix
View File

@ -103,7 +103,7 @@ in {
};
security.wrappers.smtpctl = {
owner = "nobody";
owner = "root";
group = "smtpq";
setuid = false;
setgid = true;

8
nixos/modules/services/mail/postfix.nix
View File

@ -674,7 +674,7 @@ in
services.mail.sendmailSetuidWrapper = mkIf config.services.postfix.setSendmail {
program = "sendmail";
source = "${pkgs.postfix}/bin/sendmail";
owner = "nobody";
owner = "root";
group = setgidGroup;
setuid = false;
setgid = true;
@ -683,7 +683,7 @@ in
security.wrappers.mailq = {
program = "mailq";
source = "${pkgs.postfix}/bin/mailq";
owner = "nobody";
owner = "root";
group = setgidGroup;
setuid = false;
setgid = true;
@ -692,7 +692,7 @@ in
security.wrappers.postqueue = {
program = "postqueue";
source = "${pkgs.postfix}/bin/postqueue";
owner = "nobody";
owner = "root";
group = setgidGroup;
setuid = false;
setgid = true;
@ -701,7 +701,7 @@ in
security.wrappers.postdrop = {
program = "postdrop";
source = "${pkgs.postfix}/bin/postdrop";
owner = "nobody";
owner = "root";
group = setgidGroup;
setuid = false;
setgid = true;

2
nixos/modules/services/x11/desktop-managers/cde.nix
View File

@ -50,7 +50,7 @@ in {
security.wrappers = {
dtmail = {
setgid = true;
owner = "nobody";
owner = "root";
group = "mail";
source = "${pkgs.cdesktopenv}/bin/dtmail";
};