public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Addressing PR feedback

Browse Source
This commit is contained in:
Parnell Springmeyer
2017-01-28 20:48:03 -08:00
parent 9de070e620
commit e92b8402b0
70 changed files with 320 additions and 510 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/programs/shadow.nix
+4 -44
View File
@@ -101,49 +101,9 @@ in
chpasswd = { rootOK = true; };
};
security.permissionsWrappers.setuid =
[
{ program = "su";
source = "${pkgs.shadow.su}/bin/su";
owner = "root";
group = "root";
setuid = true;
}
{ program = "chfn";
source = "${pkgs.shadow.out}/bin/chfn";
owner = "root";
group = "root";
setuid = true;
}
] ++
(lib.optionals config.users.mutableUsers
map (x: x // { owner = "root";
group = "root";
setuid = true;
})
[
{ program = "passwd";
source = "${pkgs.shadow.out}/bin/passwd";
}
{ program = "sg";
source = "${pkgs.shadow.out}/bin/sg";
}
{ program = "newgrp";
source = "${pkgs.shadow.out}/bin/newgrp";
}
{ program = "newuidmap";
source = "${pkgs.shadow.out}/bin/newuidmap";
}
{ program = "newgidmap";
source = "${pkgs.shadow.out}/bin/newgidmap";
}
]
);
security.setuidPrograms = [
"su" "chfn" "newuidmap" "newgidmap"
] ++ lib.optionals config.users.mutableUsers
[ "passwd" "sg" "newgrp" ];
};
}