nixos/physlock: fix broken wrapper
- `user` doesn't exist -> `owner` - set `setuid,group` as well (no longer optional)
This commit is contained in:
parent
5aef5e8d1e
commit
64f5d681d9
|
@ -38,9 +38,6 @@ in
|
|||
setuid wrapper to allow any user to start physlock as root, which
|
||||
is a minor security risk. Call the physlock binary to use this instead
|
||||
of using the systemd service.
|
||||
|
||||
Note that you might need to relog to have the correct binary in your
|
||||
PATH upon changing this option.
|
||||
'';
|
||||
};
|
||||
|
||||
|
@ -129,7 +126,12 @@ in
|
|||
|
||||
(mkIf cfg.allowAnyUser {
|
||||
|
||||
security.wrappers.physlock = { source = "${pkgs.physlock}/bin/physlock"; user = "root"; };
|
||||
security.wrappers.physlock =
|
||||
{ setuid = true;
|
||||
owner = "root";
|
||||
group = "root";
|
||||
source = "${pkgs.physlock}/bin/physlock";
|
||||
};
|
||||
|
||||
})
|
||||
]);
|
||||
|
|
Loading…
Reference in a new issue