pyrox.dev / nixpkgs
lol
fork atom

Revert "nixos: add setuid wrappers for some networked filesystems' helpers"

This reverts commit 26a4001a98322ab903b8186b97f33c5b282828a5. It
breaks the NFS test:

http://hydra.nixos.org/build/13943148

Also, having more setuid programs is a bad thing security-wise.

Eelco Dolstra cd7129a0 1f7c7759

options
unified split
Changed files
+1 -3
nixos
modules
security
setuid-wrappers.nix
+1 -3
nixos/modules/security/setuid-wrappers.nix 
···

       
77

       
77

       
 

       
  config = {


     

       
78

       
78

       
 

       



     

       
79

       
79

       
 

       
    security.setuidPrograms =


     

       
80

       

       
-

       
      [ "mount.nfs" "mount.nfs4" "mount.cifs"


     

       
81

       

       
-

       
        "fusermount" "umount"


     

       
82

       

       
-

       
        "wodim" "cdrdao" "growisofs" ];


     

       

       
80

       
+

       
      [ "fusermount" "wodim" "cdrdao" "growisofs" ];


     

       
83

       
81

       
 

       



     

       
84

       
82

       
 

       
    system.activationScripts.setuid =


     

       
85

       
83

       
 

       
      let