diff options
| author | Guillaume Girol <symphorien@users.noreply.github.com> | 2021-09-18 15:28:49 +0000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-09-18 15:28:49 +0000 |
| commit | ceb2e6667b064ce5130f751d7b6625a81e191dec (patch) | |
| tree | 25580706229710dd815d1d228474488331eb6b6e /nixos/modules/services/misc | |
| parent | a92dd171bae2db6eeff74a3d31fa99e47e793359 (diff) | |
| parent | 27b0c53d237b6c0411dc5798376b0ba6fbad0df0 (diff) | |
| download | nixpkgs-ceb2e6667b064ce5130f751d7b6625a81e191dec.tar nixpkgs-ceb2e6667b064ce5130f751d7b6625a81e191dec.tar.gz nixpkgs-ceb2e6667b064ce5130f751d7b6625a81e191dec.tar.bz2 nixpkgs-ceb2e6667b064ce5130f751d7b6625a81e191dec.tar.lz nixpkgs-ceb2e6667b064ce5130f751d7b6625a81e191dec.tar.xz nixpkgs-ceb2e6667b064ce5130f751d7b6625a81e191dec.tar.zst nixpkgs-ceb2e6667b064ce5130f751d7b6625a81e191dec.zip | |
Merge pull request #126289 from rnhmjoj/wrappers
nixos/security/wrappers: make well-typed
Diffstat (limited to 'nixos/modules/services/misc')
| -rw-r--r-- | nixos/modules/services/misc/mame.nix | 4 | ||||
| -rw-r--r-- | nixos/modules/services/misc/weechat.nix | 7 |
2 files changed, 9 insertions, 2 deletions
diff --git a/nixos/modules/services/misc/mame.nix b/nixos/modules/services/misc/mame.nix index 4b9a04be7c2..dd6c5ef9aa0 100644 --- a/nixos/modules/services/misc/mame.nix +++ b/nixos/modules/services/misc/mame.nix @@ -45,8 +45,10 @@ in environment.systemPackages = [ pkgs.mame ]; security.wrappers."${mame}" = { - source = "${pkgs.mame}/bin/${mame}"; + owner = "root"; + group = "root"; capabilities = "cap_net_admin,cap_net_raw+eip"; + source = "${pkgs.mame}/bin/${mame}"; }; systemd.services.mame = { diff --git a/nixos/modules/services/misc/weechat.nix b/nixos/modules/services/misc/weechat.nix index b71250f62e0..9ac2b0ea490 100644 --- a/nixos/modules/services/misc/weechat.nix +++ b/nixos/modules/services/misc/weechat.nix @@ -52,7 +52,12 @@ in wants = [ "network.target" ]; }; - security.wrappers.screen.source = "${pkgs.screen}/bin/screen"; + security.wrappers.screen = + { setuid = true; + owner = "root"; + group = "root"; + source = "${pkgs.screen}/bin/screen"; + }; }; meta.doc = ./weechat.xml; |