public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #7345 from joachifm/conditional-shadow-setuids

Browse Source 
nixos: condition shadow setuid-wrappers on mutableUsers
This commit is contained in:
Peter Simons 2015-04-14 13:23:19 +02:00
commit 6edc3022ef
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
nixos/modules/programs/shadow.nix
View File

@ -100,7 +100,9 @@ in
chgpasswd = { rootOK = true; }; chgpasswd = { rootOK = true; };
}; };
security.setuidPrograms = [ "passwd" "chfn" "su" "sg" "newgrp" security.setuidPrograms = [ "su" "chfn" ]
++ lib.optionals config.users.mutableUsers
[ "passwd" "sg" "newgrp"
"newuidmap" "newgidmap" # new in shadow 4.2.x "newuidmap" "newgidmap" # new in shadow 4.2.x
]; ];