summary refs log tree commit diff
diff options
context:
space:
mode:
authorJulien Moutinho <julm+nixpkgs@sourcephile.fr>2021-05-10 15:54:52 +0200
committerJulien Moutinho <julm+nixpkgs@sourcephile.fr>2021-05-10 15:54:52 +0200
commit7e794a1da27d116792931d96c3837e1c5485a2d0 (patch)
treec1de04a129929ad2b177de3e31994ac4b3d2bb72
parentacd5e6707e93c6b0928c96bc43057e91fa0bcee0 (diff)
downloadnixpkgs-7e794a1da27d116792931d96c3837e1c5485a2d0.tar
nixpkgs-7e794a1da27d116792931d96c3837e1c5485a2d0.tar.gz
nixpkgs-7e794a1da27d116792931d96c3837e1c5485a2d0.tar.bz2
nixpkgs-7e794a1da27d116792931d96c3837e1c5485a2d0.tar.lz
nixpkgs-7e794a1da27d116792931d96c3837e1c5485a2d0.tar.xz
nixpkgs-7e794a1da27d116792931d96c3837e1c5485a2d0.tar.zst
nixpkgs-7e794a1da27d116792931d96c3837e1c5485a2d0.zip
nixos/davfs2: wrap {,u}mount.davfs with setuid=true
-rw-r--r--nixos/modules/services/network-filesystems/davfs2.nix18
1 files changed, 18 insertions, 0 deletions
diff --git a/nixos/modules/services/network-filesystems/davfs2.nix b/nixos/modules/services/network-filesystems/davfs2.nix
index 4b6f85e4a2c..8cf314fe63a 100644
--- a/nixos/modules/services/network-filesystems/davfs2.nix
+++ b/nixos/modules/services/network-filesystems/davfs2.nix
@@ -70,6 +70,24 @@ in
       };
     };
 
+    security.wrappers."mount.davfs" = {
+      program = "mount.davfs";
+      source = "${pkgs.davfs2}/bin/mount.davfs";
+      owner = "root";
+      group = cfg.davGroup;
+      setuid = true;
+      permissions = "u+rx,g+x";
+    };
+
+    security.wrappers."umount.davfs" = {
+      program = "umount.davfs";
+      source = "${pkgs.davfs2}/bin/umount.davfs";
+      owner = "root";
+      group = cfg.davGroup;
+      setuid = true;
+      permissions = "u+rx,g+x";
+    };
+
   };
 
 }