From 5ee59b9f2ef4b054549ae4c5064dcefd9641e2c9 Mon Sep 17 00:00:00 2001
From: "Yury G. Kudryashov" <urkud.urkud@gmail.com>
Date: Fri, 13 Aug 2010 14:06:41 +0000
Subject: [PATCH] Make unix_chkpwd suid root

svn path=/nixpkgs/trunk/; revision=23164
---
 pkgs/os-specific/linux/pam/default.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pkgs/os-specific/linux/pam/default.nix b/pkgs/os-specific/linux/pam/default.nix
index 59c2deab47f..bca5609659c 100644
--- a/pkgs/os-specific/linux/pam/default.nix
+++ b/pkgs/os-specific/linux/pam/default.nix
@@ -11,6 +11,11 @@ stdenv.mkDerivation {
   buildInputs = [ flex cracklib ]
     ++ stdenv.lib.optional (stdenv.system != "armv5tel-linux") libxcrypt;
 
+  postInstall = ''
+    mv -v $out/sbin/unix_chkpwd{,.orig}
+    ln -sv /var/setuid-wrappers/unix_chkpwd $out/sbin/unix_chkpwd
+    '';
+
   preConfigure = ''
     configureFlags="$configureFlags --includedir=$out/include/security"
   '';