Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

krebs.setuid: add support for capabilities

Browse Source
This commit is contained in:
tv 2022-01-26 12:48:24 +01:00
parent c5c0caa4c1
commit f4e35a7312
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
krebs/3modules/setuid.nix
View File

@ -30,6 +30,10 @@ with import <stockholm/lib>;
}; };
apply = toString; apply = toString;
}; };
capabilities = mkOption {
default = [];
type = types.listOf types.str;
};
owner = mkOption { owner = mkOption {
default = "root"; default = "root";
type = types.enum (attrNames users); type = types.enum (attrNames users);
@ -67,6 +71,9 @@ with import <stockholm/lib>;
cp ${src} ${dst} cp ${src} ${dst}
chown ${cfg.owner}.${cfg.group} ${dst} chown ${cfg.owner}.${cfg.group} ${dst}
chmod ${cfg.mode} ${dst} chmod ${cfg.mode} ${dst}
${optionalString (cfg.capabilities != []) /* sh */ ''
${pkgs.libcap.out}/bin/setcap ${concatMapStringsSep "," shell.escape cfg.capabilities} ${dst}
''}
''; '';
})); }));
}; };