security: tweaking the setcap-wrapper example to be more relevant

2016-07-01 11:09:14 -05:00 · 2016-07-01 11:09:14 -05:00 · 2efb60c8e9
commit 2efb60c8e9
parent 4e98aa639f
1 changed files with 2 additions and 3 deletions
--- a/nixos/modules/security/setcap-wrappers.nix
+++ b/nixos/modules/security/setcap-wrappers.nix
@ -48,10 +48,9 @@ in
      type    = types.listOf types.attrs;
      default = [];
      example =
-        [ { program = "sendmail";
-            source  = "${pkgs.sendmail.bin}/bin/sendmail";
+        [ { program = "ping";
            owner   = "nobody";
-            group   = "postdrop";
+            group   = "nogroup";
            setcap  = true;
            capabilities = "cap_net_raw+ep";
          }