JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Default should be to set owner and group to root on setcap wrappers too

Browse Source
This commit is contained in:
Parnell Springmeyer 2017-02-14 08:40:12 -06:00
parent c01689f8da
commit e856d6efe8
No known key found for this signature in database
GPG Key ID: DCCF89258EAD874A
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
nixos/modules/security/wrappers/default.nix
View File

@ -73,7 +73,10 @@ let
mkWrappedPrograms = mkWrappedPrograms =
builtins.map builtins.map
(s: if (s ? "capabilities") (s: if (s ? "capabilities")
then mkSetcapProgram s then mkSetcapProgram
({ owner = "root";
, group = "root";
} // s)
else if else if
(s ? "setuid" && s.setuid == true) || (s ? "setuid" && s.setuid == true) ||
(s ? "setguid" && s.setguid == true) || (s ? "setguid" && s.setguid == true) ||