Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

tv pkgs.ff: drop sudo

Browse Source
This commit is contained in:
tv 2016-07-23 11:47:46 +02:00
parent a774642d29
commit ad816aaa28
2 changed files with 3 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
tv/5pkgs/default.nix
View File

@ -15,7 +15,9 @@
ejabberd = pkgs.callPackage ./ejabberd { ejabberd = pkgs.callPackage ./ejabberd {
erlang = pkgs.erlangR16; erlang = pkgs.erlangR16;
}; };
ff = pkgs.callPackage ./ff {}; ff = pkgs.writeDashBin "ff" ''
exec ${pkgs.firefoxWrapper}/bin/firefox "$@"
'';
gnupg = gnupg =
if elem config.krebs.build.host.name ["xu" "wu"] if elem config.krebs.build.host.name ["xu" "wu"]
then super.gnupg21 then super.gnupg21

12
tv/5pkgs/ff/default.nix
View File

@ -1,12 +0,0 @@
{ pkgs, ... }:
# TODO use krebs.setuid
# This requires that we can create setuid executables that can only be accessed
# by a single user. [per-user-setuid]
# using bash for %q
pkgs.writeBashBin "ff" ''
exec /var/setuid-wrappers/sudo -u ff -i <<EOF
exec ${pkgs.firefoxWrapper}/bin/firefox $(printf " %q" "$@")
EOF
''