nixos/davfs2: wrap {,u}mount.davfs with setuid=true

master
Julien Moutinho 2021-05-10 15:54:52 +02:00
parent acd5e6707e
commit 7e794a1da2
1 changed files with 18 additions and 0 deletions

View File

@ -70,6 +70,24 @@ in
};
};
security.wrappers."mount.davfs" = {
program = "mount.davfs";
source = "${pkgs.davfs2}/bin/mount.davfs";
owner = "root";
group = cfg.davGroup;
setuid = true;
permissions = "u+rx,g+x";
};
security.wrappers."umount.davfs" = {
program = "umount.davfs";
source = "${pkgs.davfs2}/bin/umount.davfs";
owner = "root";
group = cfg.davGroup;
setuid = true;
permissions = "u+rx,g+x";
};
};
}