Merge pull request #51270 from aneeshusa/enable-setuid-wrapper-for-chsh
nixos/shadow: create setuid wrapper for chsh
commit53d0dc663895d11bbbea9a78ce8bca6899acdee8
authorJörg Thalheim <Mic92@users.noreply.github.com>
dateTue 2 Jun 2020, 10:50 (6 years ago)
parent00df237925b028
nixos/modules/programs/shadow.nix+3−2
@@ -114,8 +114,9 @@ in
114114 newgrp.source = "${pkgs.shadow.out}/bin/newgrp";
115115 newuidmap.source = "${pkgs.shadow.out}/bin/newuidmap";
116116 newgidmap.source = "${pkgs.shadow.out}/bin/newgidmap";
117− } // (if config.users.mutableUsers then {
117+ } // lib.optionalAttrs config.users.mutableUsers {
118+ chsh.source = "${pkgs.shadow.out}/bin/chsh";
118119 passwd.source = "${pkgs.shadow.out}/bin/passwd";
119− } else {});
120+ };
120121 };
121122}