···

       
69
       
69
       
 
       
    environment.systemPackages = [ virtualbox ];

     

       
70
       
70
       
 
       


     

       
71
       
71
       
 
       
    security.wrappers = let

     

       
72
       
72
       
-
       
      mkSuid = program: {"${program}" = {

     

       
72
       
72
       
+
       
      mkSuid = program: {

     

       
73
       
73
       
 
       
        source = "${virtualbox}/libexec/virtualbox/${program}";

     

       
74
       
74
       
 
       
        owner = "root";

     

       
75
       
75
       
 
       
        group = "vboxusers";

     

       
76
       
76
       
 
       
        setuid = true;

     

       
77
       
77
       
-
       
      };};

     

       
78
       
78
       
-
       
    in mkIf cfg.enableHardening (map mkSuid [

     

       
77
       
77
       
+
       
      };

     

       
78
       
78
       
+
       
    in mkIf cfg.enableHardening

     

       
79
       
79
       
+
       
      (builtins.listToAttrs (map (x: { name = x; value = mkSuid x; }) [

     

       
79
       
80
       
 
       
      "VBoxHeadless"

     

       
80
       
81
       
 
       
      "VBoxNetAdpCtl"

     

       
81
       
82
       
 
       
      "VBoxNetDHCP"

     
···

       
83
       
84
       
 
       
      "VBoxSDL"

     

       
84
       
85
       
 
       
      "VBoxVolInfo"

     

       
85
       
86
       
 
       
      "VirtualBox"

     

       
86
       
86
       
-
       
    ]);

     

       
87
       
87
       
+
       
    ]));

     

       
87
       
88
       
 
       


     

       
88
       
89
       
 
       
    users.extraGroups.vboxusers.gid = config.ids.gids.vboxusers;

     

       
89
       
90