chromium-suid-sandbox module: fix description

Changed files
+14 -10
nixos
modules
+14 -10
nixos/modules/security/chromium-suid-sandbox.nix
···
sandbox = pkgs.chromium.sandbox;
in
{
-
options.security.chromiumSuidSandbox.enable = mkEnableOption ''
-
Whether to install the Chromium SUID sandbox which is an executable that
-
Chromium may use in order to achieve sandboxing.
-
If you get the error "The SUID sandbox helper binary was found, but is not
-
configured correctly.", turning this on might help.
-
Also, if the URL chrome://sandbox tells you that "You are not adequately
-
sandboxed!", turning this on might resolve the issue.
-
Finally, if you have <option>security.grsecurity</option> enabled and you
-
use Chromium, you probably need this.
-
'';
config = mkIf cfg.enable {
environment.systemPackages = [ sandbox ];
···
sandbox = pkgs.chromium.sandbox;
in
{
+
options.security.chromiumSuidSandbox.enable = mkOption {
+
type = types.bool;
+
default = false;
+
description = ''
+
Whether to install the Chromium SUID sandbox which is an executable that
+
Chromium may use in order to achieve sandboxing.
+
If you get the error "The SUID sandbox helper binary was found, but is not
+
configured correctly.", turning this on might help.
+
Also, if the URL chrome://sandbox tells you that "You are not adequately
+
sandboxed!", turning this on might resolve the issue.
+
Finally, if you have <option>security.grsecurity</option> enabled and you
+
use Chromium, you probably need this.
+
'';
+
};
config = mkIf cfg.enable {
environment.systemPackages = [ sandbox ];