Add unix_chkpwd suid wrapper

svn path=/nixos/trunk/; revision=23165
This commit is contained in:
Yury G. Kudryashov 2010-08-13 14:07:34 +00:00
parent cfb465c7a5
commit f0eb823a34
2 changed files with 12 additions and 3 deletions

View File

@ -191,7 +191,7 @@ in
###### implementation ###### implementation
config = { config = {
environment.systemPackages = environment.systemPackages =
# Include the PAM modules in the system path mostly for the manpages. # Include the PAM modules in the system path mostly for the manpages.
[ pkgs.pam ] [ pkgs.pam ]
@ -205,6 +205,14 @@ in
target = "pam.d/other"; target = "pam.d/other";
}; };
security.setuidOwners = [ {
program = "unix_chkpwd";
source = "${pkgs.pam}/sbin/unix_chkpwd.orig";
owner = "root";
setuid = true;
} ];
security.pam.services = security.pam.services =
# Most of these should be moved to specific modules. # Most of these should be moved to specific modules.
[ { name = "cups"; } [ { name = "cups"; }
@ -217,5 +225,5 @@ in
]; ];
}; };
} }

View File

@ -62,7 +62,8 @@ in
default = "/var/setuid-wrappers"; default = "/var/setuid-wrappers";
description = '' description = ''
This option defines the path to the setuid wrappers. It This option defines the path to the setuid wrappers. It
should generally not be overriden. should generally not be overriden. Some packages in nixpkgs rely on
wrapperDir == /var/setuid-wrappers
''; '';
}; };