diff --git a/modules/services/x11/desktop-managers/kde4.nix b/modules/services/x11/desktop-managers/kde4.nix
index cf4faef223f..5ed501e4b02 100644
--- a/modules/services/x11/desktop-managers/kde4.nix
+++ b/modules/services/x11/desktop-managers/kde4.nix
@@ -47,7 +47,13 @@ in
           '';
       };
 
-    security.setuidPrograms = [ "kcheckpass" ];
+    security.setuidOwners = [ {
+      program = "kcheckpass";
+      source = "${pkgs.kde4.kdebase_workspace}/lib/kde4/libexec/kcheckpass";
+      owner = "root";
+      group = "root";
+      setuid = true;
+    } ];
 
     environment = {
       kdePackages = [