about summary refs log tree commit diff
path: root/pkgs/tools/system/suid-chroot
diff options
context:
space:
mode:
authorJörg Thalheim <joerg@thalheim.io>2017-06-28 15:58:36 +0100
committerJörg Thalheim <joerg@thalheim.io>2017-06-28 16:00:38 +0100
commit855c1bde4285b3ece6c6a6bbd475b36ea0bc10b1 (patch)
tree7f9c11a4e021b3496ad43d4e1f484af9e1f0bf1e /pkgs/tools/system/suid-chroot
parent5015dea12a59264174e5d30d2605f3dfc4efdc85 (diff)
downloadnixlib-855c1bde4285b3ece6c6a6bbd475b36ea0bc10b1.tar
nixlib-855c1bde4285b3ece6c6a6bbd475b36ea0bc10b1.tar.gz
nixlib-855c1bde4285b3ece6c6a6bbd475b36ea0bc10b1.tar.bz2
nixlib-855c1bde4285b3ece6c6a6bbd475b36ea0bc10b1.tar.lz
nixlib-855c1bde4285b3ece6c6a6bbd475b36ea0bc10b1.tar.xz
nixlib-855c1bde4285b3ece6c6a6bbd475b36ea0bc10b1.tar.zst
nixlib-855c1bde4285b3ece6c6a6bbd475b36ea0bc10b1.zip
suid-chroot: do not set suid bit during install
To be useful in nixos, it probably also requires a module to set up a hardening wrapper.
Diffstat (limited to 'pkgs/tools/system/suid-chroot')
-rw-r--r--pkgs/tools/system/suid-chroot/default.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/pkgs/tools/system/suid-chroot/default.nix b/pkgs/tools/system/suid-chroot/default.nix
index 1278480973f9..ebedf5f544e6 100644
--- a/pkgs/tools/system/suid-chroot/default.nix
+++ b/pkgs/tools/system/suid-chroot/default.nix
@@ -11,6 +11,7 @@ stdenv.mkDerivation rec {
 
   postPatch = ''
     substituteInPlace Makefile --replace /usr $out
+    sed -i -e '/chmod u+s/d' Makefile
   '';
 
   meta = with stdenv.lib; {