public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos: condition shadow setuid-wrappers on mutableUsers

Browse Source 
Having junk setuid wrappers in PATH is annoying.
This commit is contained in:
Joachim Fasting 2015-04-12 21:42:50 +02:00
parent 2d8cfe76a9
commit 75ab7bf960
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
nixos/modules/programs/shadow.nix
View File

@ -100,8 +100,10 @@ in
chgpasswd = { rootOK = true; }; chgpasswd = { rootOK = true; };
}; };
security.setuidPrograms = [ "passwd" "chfn" "su" "sg" "newgrp" security.setuidPrograms = [ "su" "chfn" ]
"newuidmap" "newgidmap" # new in shadow 4.2.x ++ lib.optionals config.users.mutableUsers
[ "passwd" "sg" "newgrp"
"newuidmap" "newgidmap" # new in shadow 4.2.x
]; ];
}; };