added "from system path" hint to description of setuid options
svn path=/nixos/trunk/; revision=12568
This commit is contained in:
parent
ffe45949e8
commit
23144fee75
@ -2506,8 +2506,8 @@ in
|
|||||||
"fusermount" "wodim" "cdrdao"
|
"fusermount" "wodim" "cdrdao"
|
||||||
];
|
];
|
||||||
description = "
|
description = "
|
||||||
Only the programs listed here will be made setuid root (through
|
Only the programs from system path listed her will be made setuid root
|
||||||
a wrapper program). It's better to set
|
(through a wrapper program). It's better to set
|
||||||
<option>security.extraSetuidPrograms</option>.
|
<option>security.extraSetuidPrograms</option>.
|
||||||
";
|
";
|
||||||
};
|
};
|
||||||
@ -2531,7 +2531,7 @@ in
|
|||||||
setgid = true;
|
setgid = true;
|
||||||
}];
|
}];
|
||||||
description = ''
|
description = ''
|
||||||
List of non-trivial setuid programs, like Postfix sendmail. Default
|
List of non-trivial setuid programs from ssystem path, like Postfix sendmail. Default
|
||||||
should probably be nobody:nogroup:false:false - if you are bothering
|
should probably be nobody:nogroup:false:false - if you are bothering
|
||||||
doing anything with a setuid program, "root.root u+s g-s" is not what
|
doing anything with a setuid program, "root.root u+s g-s" is not what
|
||||||
you are aiming at..
|
you are aiming at..
|
||||||
|
Loading…
x
Reference in New Issue
Block a user