summary refs log tree commit diff
path: root/nixos/modules/security
diff options
context:
space:
mode:
authorEelco Dolstra <eelco.dolstra@logicblox.com>2013-11-18 17:45:31 +0100
committerEelco Dolstra <eelco.dolstra@logicblox.com>2013-11-18 18:04:17 +0100
commit7ea47df0a4b2154f9a1a46a0c7d105805bfbde3a (patch)
tree97de3658b92c995fbfc07ae48eb942c8f623397e /nixos/modules/security
parent1ce709ee005a3310b7fab8ee4b5de824474252bf (diff)
downloadnixlib-7ea47df0a4b2154f9a1a46a0c7d105805bfbde3a.tar
nixlib-7ea47df0a4b2154f9a1a46a0c7d105805bfbde3a.tar.gz
nixlib-7ea47df0a4b2154f9a1a46a0c7d105805bfbde3a.tar.bz2
nixlib-7ea47df0a4b2154f9a1a46a0c7d105805bfbde3a.tar.lz
nixlib-7ea47df0a4b2154f9a1a46a0c7d105805bfbde3a.tar.xz
nixlib-7ea47df0a4b2154f9a1a46a0c7d105805bfbde3a.tar.zst
nixlib-7ea47df0a4b2154f9a1a46a0c7d105805bfbde3a.zip
polkit: Fix authenticating as a wheel user
In Javascript-based PolKit, "unix-user:0;unix-group:wheel" is not
valid; it should be a list "unix-user:0", "unix-group:wheel".
Diffstat (limited to 'nixos/modules/security')
-rw-r--r--nixos/modules/security/polkit.nix8
1 files changed, 4 insertions, 4 deletions
diff --git a/nixos/modules/security/polkit.nix b/nixos/modules/security/polkit.nix
index 614e10cd8f36..e81a4d95f05c 100644
--- a/nixos/modules/security/polkit.nix
+++ b/nixos/modules/security/polkit.nix
@@ -33,9 +33,9 @@ in
     };
 
     security.polkit.adminIdentities = mkOption {
-      type = types.str;
-      default = "unix-user:0;unix-group:wheel";
-      example = "";
+      type = types.listOf types.str;
+      default = [ "unix-user:0" "unix-group:wheel" ];
+      example = [ "unix-user:alice" "unix-group:admin" ];
       description =
         ''
           Specifies which users are considered “administrators”, for those
@@ -62,7 +62,7 @@ in
     environment.etc."polkit-1/rules.d/10-nixos.rules".text =
       ''
         polkit.addAdminRule(function(action, subject) {
-          return ["${cfg.adminIdentities}"];
+          return [${concatStringsSep ", " (map (i: "\"${i}\"") cfg.adminIdentities)}];
         });
 
         ${cfg.extraConfig}