summary refs log tree commit diff
path: root/nixos/modules/security/sudo.nix
diff options
context:
space:
mode:
authorParnell Springmeyer <parnell@awakenetworks.com>2016-07-15 19:10:48 -0500
committerParnell Springmeyer <parnell@awakenetworks.com>2016-09-01 19:17:43 -0500
commit390ab0b3eff809052d5b9d9b5335413b36898481 (patch)
tree15700959b5c568cff51e2e8abafed931bff7e6dd /nixos/modules/security/sudo.nix
parent81b33eb46645b1bd3ab5029c0ca2012a24902bb0 (diff)
downloadnixlib-390ab0b3eff809052d5b9d9b5335413b36898481.tar
nixlib-390ab0b3eff809052d5b9d9b5335413b36898481.tar.gz
nixlib-390ab0b3eff809052d5b9d9b5335413b36898481.tar.bz2
nixlib-390ab0b3eff809052d5b9d9b5335413b36898481.tar.lz
nixlib-390ab0b3eff809052d5b9d9b5335413b36898481.tar.xz
nixlib-390ab0b3eff809052d5b9d9b5335413b36898481.tar.zst
nixlib-390ab0b3eff809052d5b9d9b5335413b36898481.zip
everything?: Updating every package that depended on the old setuidPrograms configuration.
Diffstat (limited to 'nixos/modules/security/sudo.nix')
-rw-r--r--nixos/modules/security/sudo.nix17
1 files changed, 16 insertions, 1 deletions
diff --git a/nixos/modules/security/sudo.nix b/nixos/modules/security/sudo.nix
index bced2a6ed757..06dde14cd1c1 100644
--- a/nixos/modules/security/sudo.nix
+++ b/nixos/modules/security/sudo.nix
@@ -81,7 +81,22 @@ in
         ${cfg.extraConfig}
       '';
 
-    security.setuidPrograms = [ "sudo" "sudoedit" ];
+    security.permissionsWrappers.setuid =
+     [
+       { program = "sudo";
+         source  = "${pkgs.sudo.out}/bin/sudo";
+         user    = "root";
+         group   = "root";
+         setuid  = true;
+       }
+
+       { program = "sudoedit"
+         source  = "${pkgs.sudo.out}/bin/sudo";
+         user    = "root";
+         group   = "root";
+         setuid  = true;
+       }
+    ];
 
     environment.systemPackages = [ sudo ];