Gotta provide sane defaults! This is what I get for 5AM coding

7 years ago · 4856b42ab6
parent 9abe7528e4
commit 4856b42ab6
1 changed files with 7 additions and 1 deletions
--- a/nixos/modules/security/wrappers/default.nix
+++ b/nixos/modules/security/wrappers/default.nix
@ -79,7 +79,13 @@ let
             (s ? "setguid" && s.setguid == true) ||
             (s ? "permissions")
          then mkSetuidProgram s
-          else ""
+          else mkSetuidProgram
+                 ({ owner  = "root";
+                    group  = "root";
+                    setuid = true;
+                    setgid = false;
+                    permissions = "u+rx,g+x,o+x";
+                  } // s)
      ) programs;
 in
 {