commit 0a53886700520c494906ab04a4f9b39d61bfdfb9 · pyrox.dev/nixpkgs

pyrox.dev / nixpkgs

lol

fork atom

nixos/{tmpfiles, wrappers}: explicitly set RestrictSUIDSGID false (#426882)

Will Fancher 4 months ago 0a538867 832f5d97

options

unified split

Changed files

nixos

modules

security

wrappers

default.nix

system

boot

systemd

tmpfiles.nix

nixos/modules/security/wrappers/default.nix

···

       318
       318
        
               "/nix/store"

     

       319
       319
        
               "/run/wrappers"

     

       320
       320
        
             ];

     

       321
       321
       +
             serviceConfig.RestrictSUIDSGID = false;

     

       321
       322
        
             serviceConfig.Type = "oneshot";

     

       322
       323
        
             script = ''

     

       323
       324
        
               chmod 755 "${parentWrapperDir}"

nixos/modules/system/boot/systemd/tmpfiles.nix

···

       280
       280
        
                 "network.hosts"

     

       281
       281
        
                 "ssh.authorized_keys.root"

     

       282
       282
        
               ];

     

       283
       283
       +
               RestrictSUIDSGID = false;

     

       283
       284
        
             };

     

       284
       285
        
           };

     

       285
       286