public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

security: tweaking the setcap-wrapper example to be more relevant

Browse Source
This commit is contained in:
Parnell Springmeyer 2016-07-01 11:09:14 -05:00
parent 4e98aa639f
commit 2efb60c8e9
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
nixos/modules/security/setcap-wrappers.nix
View File

@ -48,10 +48,9 @@ in
type = types.listOf types.attrs; type = types.listOf types.attrs;
default = []; default = [];
example = example =
[ { program = "sendmail"; [ { program = "ping";
source = "${pkgs.sendmail.bin}/bin/sendmail";
owner = "nobody"; owner = "nobody";
group = "postdrop"; group = "nogroup";
setcap = true; setcap = true;
capabilities = "cap_net_raw+ep"; capabilities = "cap_net_raw+ep";
} }