public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

chromium-suid-sandbox module: fix description

Browse Source
This commit is contained in:
Nikolay Amiantov 2016-08-08 01:55:11 +03:00
parent 43da8b14a0
commit b2413e48ae
1 changed files with 14 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
nixos/modules/security/chromium-suid-sandbox.nix
View File

@ -7,19 +7,23 @@ let
sandbox = pkgs.chromium.sandbox; sandbox = pkgs.chromium.sandbox;
in in
{ {
options.security.chromiumSuidSandbox.enable = mkEnableOption '' options.security.chromiumSuidSandbox.enable = mkOption {
Whether to install the Chromium SUID sandbox which is an executable that type = types.bool;
Chromium may use in order to achieve sandboxing. default = false;
description = ''
Whether to install the Chromium SUID sandbox which is an executable that
Chromium may use in order to achieve sandboxing.
If you get the error "The SUID sandbox helper binary was found, but is not If you get the error "The SUID sandbox helper binary was found, but is not
configured correctly.", turning this on might help. configured correctly.", turning this on might help.
Also, if the URL chrome://sandbox tells you that "You are not adequately Also, if the URL chrome://sandbox tells you that "You are not adequately
sandboxed!", turning this on might resolve the issue. sandboxed!", turning this on might resolve the issue.
Finally, if you have <option>security.grsecurity</option> enabled and you Finally, if you have <option>security.grsecurity</option> enabled and you
use Chromium, you probably need this. use Chromium, you probably need this.
''; '';
};
config = mkIf cfg.enable { config = mkIf cfg.enable {
environment.systemPackages = [ sandbox ]; environment.systemPackages = [ sandbox ];