From be7f104502cf6c6e5ae95f3af8c624cb436c7fd1 Mon Sep 17 00:00:00 2001 From: obadz Date: Mon, 30 Mar 2015 23:50:45 +0100 Subject: sg: add setuid wrapper. (newgrp is a symlink to sg and was already setuid). sudo: add ability for wheel users to change group (as well as user) --- nixos/modules/programs/shadow.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'nixos/modules/programs/shadow.nix') diff --git a/nixos/modules/programs/shadow.nix b/nixos/modules/programs/shadow.nix index 5c2ea07c5549..895ecb122cb6 100644 --- a/nixos/modules/programs/shadow.nix +++ b/nixos/modules/programs/shadow.nix @@ -100,7 +100,7 @@ in chgpasswd = { rootOK = true; }; }; - security.setuidPrograms = [ "passwd" "chfn" "su" "newgrp" + security.setuidPrograms = [ "passwd" "chfn" "su" "sg" "newgrp" "newuidmap" "newgidmap" # new in shadow 4.2.x ]; -- cgit 1.4.1