nixos/shadow: setuid wrappers for new{uid,gid}map

These utils are not related to user management, so they should be
available even if immutable users are enabled.
This commit is contained in:
Benno Fünfstück 2016-08-19 14:47:11 +02:00
parent 80dbdba6dd
commit 51b165c7d2

View file

@ -103,10 +103,9 @@ in
};
security.setuidPrograms = [ "su" "chfn" ]
++ [ "newuidmap" "newgidmap" ] # new in shadow 4.2.x
++ lib.optionals config.users.mutableUsers
[ "passwd" "sg" "newgrp"
"newuidmap" "newgidmap" # new in shadow 4.2.x
];
[ "passwd" "sg" "newgrp" ];
};