Default should be to set owner and group to root on setcap wrappers too

2017-02-14 08:40:12 -06:00 · 2017-02-14 08:40:12 -06:00 · e856d6efe8
commit e856d6efe8
parent c01689f8da
1 changed files with 4 additions and 1 deletions
--- a/nixos/modules/security/wrappers/default.nix
+++ b/nixos/modules/security/wrappers/default.nix
@ -73,7 +73,10 @@ let
  mkWrappedPrograms =
    builtins.map
      (s: if (s ? "capabilities")
-          then mkSetcapProgram s
+          then mkSetcapProgram
+                 ({ owner = "root";
+                  , group = "root";
+                  } // s)
          else if 
             (s ? "setuid"  && s.setuid  == true) ||
             (s ? "setguid" && s.setguid == true) ||