summary refs log tree commit diff
path: root/nixos/modules/security/duosec.nix
diff options
context:
space:
mode:
authorParnell Springmeyer <parnell@digitalmentat.com>2017-01-28 20:48:03 -0800
committerParnell Springmeyer <parnell@digitalmentat.com>2017-01-28 20:48:03 -0800
commite92b8402b05f34072a20075ed54660e7a7237cc3 (patch)
tree554ae0ff77ff4192a895bab155e5e7116c80f28d /nixos/modules/security/duosec.nix
parent9de070e620544f9637b20966eec62cbff42988d8 (diff)
downloadnixlib-e92b8402b05f34072a20075ed54660e7a7237cc3.tar
nixlib-e92b8402b05f34072a20075ed54660e7a7237cc3.tar.gz
nixlib-e92b8402b05f34072a20075ed54660e7a7237cc3.tar.bz2
nixlib-e92b8402b05f34072a20075ed54660e7a7237cc3.tar.lz
nixlib-e92b8402b05f34072a20075ed54660e7a7237cc3.tar.xz
nixlib-e92b8402b05f34072a20075ed54660e7a7237cc3.tar.zst
nixlib-e92b8402b05f34072a20075ed54660e7a7237cc3.zip
Addressing PR feedback
Diffstat (limited to 'nixos/modules/security/duosec.nix')
-rw-r--r--nixos/modules/security/duosec.nix11
1 files changed, 1 insertions, 10 deletions
diff --git a/nixos/modules/security/duosec.nix b/nixos/modules/security/duosec.nix
index e5b354270153..ee62c34438e5 100644
--- a/nixos/modules/security/duosec.nix
+++ b/nixos/modules/security/duosec.nix
@@ -188,16 +188,7 @@ in
 
      environment.systemPackages = [ pkgs.duo-unix ];
 
-     security.permissionsWrappers.setuid =
-     [
-       { program = "login_duo";
-         source  = "${pkgs.duo-unix.out}/bin/login_duo";
-         owner   = "root";
-         group   = "root";
-         setuid  = true;
-       }
-     ];
-
+     security.setuidPrograms = [ "login_duo" ];
      environment.etc = loginCfgFile ++ pamCfgFile;
 
      /* If PAM *and* SSH are enabled, then don't do anything special.