aboutsummaryrefslogtreecommitdiffhomepage
path: root/nixos.nix
diff options
context:
space:
mode:
authorOphestra <cat@gensokyo.uk>2025-10-08 18:22:24 +0900
committerOphestra <cat@gensokyo.uk>2025-10-08 18:22:24 +0900
commit5bf28901a44e36476900b3671958c1a27cef0ba0 (patch)
treecb6d8afdb5d00af7158df46d4af6ca98f872a993 /nixos.nix
parent9b507715d42f74c3f18fe817c2464abfca1b0182 (diff)
cmd/hsu: check against setgid bit
The getgroups behaviour is already checked for, but it never hurts to be more careful in a setuid program. Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'nixos.nix')
-rw-r--r--nixos.nix2
1 files changed, 0 insertions, 2 deletions
diff --git a/nixos.nix b/nixos.nix
index 6dd51807..8135690f 100644
--- a/nixos.nix
+++ b/nixos.nix
@@ -51,11 +51,9 @@ in
];
security.wrappers.hsu = {
-
source = "${cfg.hsuPackage}/bin/hsu";
setuid = true;
owner = "root";
- setgid = true;
group = "root";
};