Remove some setuid wrappers for non-standard programs

2014-09-05 14:46:36 +02:00
parent cd7129a037
commit bb9ee6a13f
1 changed files with 1 additions and 2 deletions
--- a/nixos/modules/security/setuid-wrappers.nix
+++ b/nixos/modules/security/setuid-wrappers.nix
@@ -76,8 +76,7 @@ in

  config = {

-    security.setuidPrograms =
-      [ "fusermount" "wodim" "cdrdao" "growisofs" ];
+    security.setuidPrograms = [ "fusermount" ];

    system.activationScripts.setuid =
      let