From 2efb60c8e9c502b0fb4df81b03700b600118722a Mon Sep 17 00:00:00 2001 From: Parnell Springmeyer Date: Fri, 1 Jul 2016 11:09:14 -0500 Subject: security: tweaking the setcap-wrapper example to be more relevant --- nixos/modules/security/setcap-wrappers.nix | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) (limited to 'nixos') diff --git a/nixos/modules/security/setcap-wrappers.nix b/nixos/modules/security/setcap-wrappers.nix index faebc6f7e0df..b8383d813585 100644 --- a/nixos/modules/security/setcap-wrappers.nix +++ b/nixos/modules/security/setcap-wrappers.nix @@ -48,10 +48,9 @@ in type = types.listOf types.attrs; default = []; example = - [ { program = "sendmail"; - source = "${pkgs.sendmail.bin}/bin/sendmail"; + [ { program = "ping"; owner = "nobody"; - group = "postdrop"; + group = "nogroup"; setcap = true; capabilities = "cap_net_raw+ep"; } -- cgit 1.4.1