Put /var/setuid-wrappers on a tmpfs

This allows all other filesystems to be mounted without the suid option.
2014-04-19 12:40:09 +02:00
parent 2a64b0a91b
commit 9f1c9404da
2 changed files with 8 additions and 3 deletions
@@ -117,8 +117,7 @@ in
          # programs to be wrapped.
          SETUID_PATH=${config.system.path}/bin:${config.system.path}/sbin

-          if test -d ${wrapperDir}; then rm -f ${wrapperDir}/*; fi # */
-          mkdir -p ${wrapperDir}
+          rm -f ${wrapperDir}/* # */

          ${concatMapStrings makeSetuidWrapper setuidPrograms}
        '';