nixos/samba: add mount.cifs +s wrapper (#328901)
This commit is contained in:
commit
024357143a
@ -239,6 +239,15 @@ in
|
|||||||
|
|
||||||
security.pam.services.samba = {};
|
security.pam.services.samba = {};
|
||||||
environment.systemPackages = [ cfg.package ];
|
environment.systemPackages = [ cfg.package ];
|
||||||
|
# Like other mount* related commands that need the setuid bit, this is
|
||||||
|
# required too.
|
||||||
|
security.wrappers."mount.cifs" = {
|
||||||
|
program = "mount.cifs";
|
||||||
|
source = "${lib.getBin pkgs.cifs-utils}/bin/mount.cifs";
|
||||||
|
owner = "root";
|
||||||
|
group = "root";
|
||||||
|
setuid = true;
|
||||||
|
};
|
||||||
|
|
||||||
networking.firewall.allowedTCPPorts = mkIf cfg.openFirewall [ 139 445 ];
|
networking.firewall.allowedTCPPorts = mkIf cfg.openFirewall [ 139 445 ];
|
||||||
networking.firewall.allowedUDPPorts = mkIf cfg.openFirewall [ 137 138 ];
|
networking.firewall.allowedUDPPorts = mkIf cfg.openFirewall [ 137 138 ];
|
||||||
|
Loading…
Reference in New Issue
Block a user