everything?: Updating every package that depended on the old setuidPrograms configuration.

2016-09-01 19:17:43 -05:00
parent 81b33eb466
commit 390ab0b3ef
15 changed files with 170 additions and 28 deletions
@@ -81,7 +81,22 @@ in
        ${cfg.extraConfig}
      '';

-    security.setuidPrograms = [ "sudo" "sudoedit" ];
+    security.permissionsWrappers.setuid =
+     [
+       { program = "sudo";
+         source  = "${pkgs.sudo.out}/bin/sudo";
+         user    = "root";
+         group   = "root";
+         setuid  = true;
+       }
+
+       { program = "sudoedit"
+         source  = "${pkgs.sudo.out}/bin/sudo";
+         user    = "root";
+         group   = "root";
+         setuid  = true;
+       }
+    ];

    environment.systemPackages = [ sudo ];