From f0baf6cb3888806cafe0b61292052ccd03313297 Mon Sep 17 00:00:00 2001 From: melvyn Date: Fri, 22 Aug 2025 15:57:02 -0700 Subject: [PATCH] freeimpi: disable hardcoded uid check By default, freeipmi tools refuse to run if they are not ran as root. This is unnecessarily restrictive when access to the device file is already root-only by default. Disabling this check allows the user to set up permissions as they see fit, but does not loosen security by default compared to the existing situation. --- pkgs/by-name/fr/freeipmi/package.nix | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/pkgs/by-name/fr/freeipmi/package.nix b/pkgs/by-name/fr/freeipmi/package.nix index ddae0b150e52..b97bda12b45d 100644 --- a/pkgs/by-name/fr/freeipmi/package.nix +++ b/pkgs/by-name/fr/freeipmi/package.nix @@ -25,7 +25,11 @@ stdenv.mkDerivation rec { libgpg-error ]; - configureFlags = lib.optionals (stdenv.buildPlatform != stdenv.hostPlatform) [ + configureFlags = [ + # Device permissions are set by udev/kernel, so don't restrict them unnecessarily + "--with-dont-check-for-root" + ] + ++ lib.optionals (stdenv.buildPlatform != stdenv.hostPlatform) [ "ac_cv_file__dev_urandom=true" "ac_cv_file__dev_random=true" ];