Gotta provide sane defaults! This is what I get for 5AM coding

Changed files
+7 -1
nixos
modules
security
wrappers
+7 -1
nixos/modules/security/wrappers/default.nix
···
(s ? "setguid" && s.setguid == true) ||
(s ? "permissions")
then mkSetuidProgram s
-
else ""
+
else mkSetuidProgram
+
({ owner = "root";
+
group = "root";
+
setuid = true;
+
setgid = false;
+
permissions = "u+rx,g+x,o+x";
+
} // s)
) programs;
in
{