public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Revert "nixos: add setuid wrappers for some networked filesystems' helpers"

Browse Source 
This reverts commit 26a4001a98322ab903b8186b97f33c5b282828a5. It
breaks the NFS test:

  http://hydra.nixos.org/build/13943148

Also, having more setuid programs is a bad thing security-wise.
This commit is contained in:
Eelco Dolstra 2014-09-05 14:43:11 +02:00
parent 1f7c775910
commit cd7129a037
1 changed files with 1 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
nixos/modules/security/setuid-wrappers.nix
View File

@ -77,9 +77,7 @@ in
config = {
security.setuidPrograms =
[ "mount.nfs" "mount.nfs4" "mount.cifs"
"fusermount" "umount"
"wodim" "cdrdao" "growisofs" ];
[ "fusermount" "wodim" "cdrdao" "growisofs" ];
system.activationScripts.setuid =
let