everything?: Updating every package that depended on the old setuidPrograms configuration.

2016-09-01 19:17:43 -05:00
parent 81b33eb466
commit 390ab0b3ef
15 changed files with 170 additions and 28 deletions
@@ -83,7 +83,15 @@ in

    security.pam.services.polkit-1 = {};

-    security.setuidPrograms = [ "pkexec" ];
+    security.permissionsWrappers.setuid = 
+      [
+        { program = "pkexec";
+          source  = "${pkgs.polkit.out}/bin/pkexec";
+          user    = "root";
+          group   = "root";
+          setuid  = true;
+        }
+      ];

    security.setuidOwners = [
      { program = "polkit-agent-helper-1";