lol

nixos: condition shadow setuid-wrappers on mutableUsers

Having junk setuid wrappers in PATH is annoying.

+4 -2
+4 -2
nixos/modules/programs/shadow.nix
··· 100 100 chgpasswd = { rootOK = true; }; 101 101 }; 102 102 103 - security.setuidPrograms = [ "passwd" "chfn" "su" "sg" "newgrp" 104 - "newuidmap" "newgidmap" # new in shadow 4.2.x 103 + security.setuidPrograms = [ "su" "chfn" ] 104 + ++ lib.optionals config.users.mutableUsers 105 + [ "passwd" "sg" "newgrp" 106 + "newuidmap" "newgidmap" # new in shadow 4.2.x 105 107 ]; 106 108 107 109 };