gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/{tmpfiles, wrappers}: explicitly set RestrictSUIDSGID false (#426882)

Browse Source
This commit is contained in:
Will Fancher
2025-07-30 04:31:21 -04:00
committed by GitHub
parent 832f5d974d 248c463f69
commit 0a53886700
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
nixos/modules/security/wrappers/default.nix
View File

@@ -318,6 +318,7 @@ in
"/nix/store" "/nix/store"
"/run/wrappers" "/run/wrappers"
]; ];
serviceConfig.RestrictSUIDSGID = false;
serviceConfig.Type = "oneshot"; serviceConfig.Type = "oneshot";
script = '' script = ''
chmod 755 "${parentWrapperDir}" chmod 755 "${parentWrapperDir}"

1
nixos/modules/system/boot/systemd/tmpfiles.nix
View File

@@ -280,6 +280,7 @@ in
"network.hosts" "network.hosts"
"ssh.authorized_keys.root" "ssh.authorized_keys.root"
]; ];
RestrictSUIDSGID = false;
}; };
}; };