[Nix-dev] Which option replaces security.setuidOwners?

Thomas Hunger tehunger at gmail.com
Tue Feb 14 23:39:58 CET 2017


There are some docs here:
https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/security/wrappers/default.nix#L111

Though I agree that we should probably also add something to the manual
about how to elevate privileges in NixOS.

~

On 14 February 2017 at 22:12, Tomasz Czyż <tomasz.czyz at gmail.com> wrote:

> Actually, very strange that such a huge change has no documentation
> changes at all.
>
> Good thing is, there were some tests :)
>
> 2017-02-14 22:07 GMT+00:00 Bjørn Forsman <bjorn.forsman at gmail.com>:
>
>> On 14 February 2017 at 23:04, Bjørn Forsman <bjorn.forsman at gmail.com>
>> wrote:
>> > On 14 February 2017 at 22:51, Domen Kožar <domen at dev.si> wrote:
>> >> We need to use renames for backwards compatibility then :)
>> >
>> > A rename implies same signature under different namespace (AFAICS).
>> > This is not the case here, because the option types are different.
>> >
>> > I've got a local change that is about to be pushed:
>> >
>> > +    (mkRemovedOptionModule [ "security" "setuidOwners" ] "Use
>> > security.wrappers instead")
>> > +    (mkRemovedOptionModule [ "security" "setuidPrograms" ] "Use
>> > security.wrappers instead")
>> >
>> > (I also do some other fixups that was wrt. new security.wrapper to
>> > make my NixOS build.)
>>
>> I created PR: https://github.com/NixOS/nixpkgs/pull/22806
>>
>> Best regards,
>> Bjørn Forsman
>> _______________________________________________
>> nix-dev mailing list
>> nix-dev at lists.science.uu.nl
>> http://lists.science.uu.nl/mailman/listinfo/nix-dev
>>
>
>
>
> --
> Tomasz Czyż
>
> _______________________________________________
> nix-dev mailing list
> nix-dev at lists.science.uu.nl
> http://lists.science.uu.nl/mailman/listinfo/nix-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.science.uu.nl/pipermail/nix-dev/attachments/20170214/4a88b0c2/attachment.html>


More information about the nix-dev mailing list