b12f/nixpkgs
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

security-wrapper: Wrap <para> tags in a <note> tag

Browse source
This commit is contained in:
Parnell Springmeyer 2017-02-14 21:30:04 -06:00
parent c34a52bf5d
commit 1f83f1c878
No known key found for this signature in database
GPG key ID: DCCF89258EAD874A
1 changed files with 20 additions and 18 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
nixos/modules/security/wrappers/default.nix
View file

@ -109,10 +109,11 @@ in
};
};
description = ''
<para>This option allows the ownership and permissions on the
setuid wrappers for specific programs to be overridden from
the default (setuid root, but not setgid root).</para>
This option allows the ownership and permissions on the setuid
wrappers for specific programs to be overridden from the
default (setuid root, but not setgid root).
<note>
<para>Additionally, this option can set capabilities on a
wrapper program that propagates those capabilities down to the
wrapped, real program.</para>
@ -130,6 +131,7 @@ in
cases in which the real program needs cap_setpcap but it at
least leans on the side security paranoid vs. too
relaxed.</para>
</note>
'';
};