JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

nixos: make setgid wrappers root-owned

Browse Source
This commit is contained in:
rnhmjoj 2021-10-03 11:43:13 +02:00
parent 378d2c5dce
commit 31790c81dc
No known key found for this signature in database
GPG Key ID: BFBAF4C975F76450
5 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nixos/modules/programs/ccache.nix
View File

@ -28,7 +28,7 @@ in {
# "nix-ccache --show-stats" and "nix-ccache --clear" # "nix-ccache --show-stats" and "nix-ccache --clear"
security.wrappers.nix-ccache = { security.wrappers.nix-ccache = {
owner = "nobody"; owner = "root";
group = "nixbld"; group = "nixbld";
setuid = false; setuid = false;
setgid = true; setgid = true;

2
nixos/modules/programs/mosh.nix
View File

@ -33,7 +33,7 @@ in
security.wrappers = mkIf cfg.withUtempter { security.wrappers = mkIf cfg.withUtempter {
utempter = { utempter = {
source = "${pkgs.libutempter}/lib/utempter/utempter"; source = "${pkgs.libutempter}/lib/utempter/utempter";
owner = "nobody"; owner = "root";
group = "utmp"; group = "utmp";
setuid = false; setuid = false;
setgid = true; setgid = true;

2
nixos/modules/services/mail/opensmtpd.nix
View File

@ -103,7 +103,7 @@ in {
}; };
security.wrappers.smtpctl = { security.wrappers.smtpctl = {
owner = "nobody"; owner = "root";
group = "smtpq"; group = "smtpq";
setuid = false; setuid = false;
setgid = true; setgid = true;

8
nixos/modules/services/mail/postfix.nix
View File

@ -673,7 +673,7 @@ in
services.mail.sendmailSetuidWrapper = mkIf config.services.postfix.setSendmail { services.mail.sendmailSetuidWrapper = mkIf config.services.postfix.setSendmail {
program = "sendmail"; program = "sendmail";
source = "${pkgs.postfix}/bin/sendmail"; source = "${pkgs.postfix}/bin/sendmail";
owner = "nobody"; owner = "root";
group = setgidGroup; group = setgidGroup;
setuid = false; setuid = false;
setgid = true; setgid = true;
@ -682,7 +682,7 @@ in
security.wrappers.mailq = { security.wrappers.mailq = {
program = "mailq"; program = "mailq";
source = "${pkgs.postfix}/bin/mailq"; source = "${pkgs.postfix}/bin/mailq";
owner = "nobody"; owner = "root";
group = setgidGroup; group = setgidGroup;
setuid = false; setuid = false;
setgid = true; setgid = true;
@ -691,7 +691,7 @@ in
security.wrappers.postqueue = { security.wrappers.postqueue = {
program = "postqueue"; program = "postqueue";
source = "${pkgs.postfix}/bin/postqueue"; source = "${pkgs.postfix}/bin/postqueue";
owner = "nobody"; owner = "root";
group = setgidGroup; group = setgidGroup;
setuid = false; setuid = false;
setgid = true; setgid = true;
@ -700,7 +700,7 @@ in
security.wrappers.postdrop = { security.wrappers.postdrop = {
program = "postdrop"; program = "postdrop";
source = "${pkgs.postfix}/bin/postdrop"; source = "${pkgs.postfix}/bin/postdrop";
owner = "nobody"; owner = "root";
group = setgidGroup; group = setgidGroup;
setuid = false; setuid = false;
setgid = true; setgid = true;

2
nixos/modules/services/x11/desktop-managers/cde.nix
View File

@ -50,7 +50,7 @@ in {
security.wrappers = { security.wrappers = {
dtmail = { dtmail = {
setgid = true; setgid = true;
owner = "nobody"; owner = "root";
group = "mail"; group = "mail";
source = "${pkgs.cdesktopenv}/bin/dtmail"; source = "${pkgs.cdesktopenv}/bin/dtmail";
}; };