1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs synced 2024-10-22 18:12:20 -04:00
nixpkgs/nixos/modules
aszlig ac603e208c
virtualbox: Fix runtime paths in hardening mode.
Because we have to rely on setuid wrappers on NixOS, we can't easily
hardcode the executable paths and set it 4755. So for all calls, we need
to change the runtime path executable directory to /var/setuid-wrappers/
and for verification we need to retain the executable directory.

Also note, that usually VBoxNetAdpCtl, VBoxNetDHCP, VBoxNetNAT, VBoxSDL
and VBoxVolInfo don't reside in directories that are commonly in PATH,
but in /usr/lib/virtualbox in most mainstream distros. But because the
names of these executables are distinctive enough to not cause
collisions with other setuid programs, I'll leave it like that and not
patch up setuid-wrappers.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-12-18 14:06:13 +01:00
..
config
hardware
installer fix users.mutableUsers = false; install in iso 2014-12-18 12:18:49 +01:00
misc
profiles
programs virtualbox: Fix runtime paths in hardening mode. 2014-12-18 14:06:13 +01:00
security Improve /etc/sudoers message 2014-12-18 11:51:42 +01:00
services
system
tasks
testing
virtualisation
module-list.nix
rename.nix