diff options
| author | Brice Waegeneire <brice@waegenei.re> | 2021-07-06 22:03:20 +0200 |
|---|---|---|
| committer | Christopher Lemmer Webber <cwebber@dustycloud.org> | 2021-07-29 11:32:48 -0400 |
| commit | a85ec0bf69df9ec3333a214feff54d4e58b15bec (patch) | |
| tree | 3f5623ae3651936d9106bd139b4b66ffc834277b /doc | |
| parent | a7ac19851baab3fbcc40c4b2cf5b00a6ac9cd2f3 (diff) | |
services: Migrate to <setuid-program>.
* gnu/services/dbus.scm (dbus-setuid-programs, polkit-setuid-programs):
Return setuid-programs.
* gnu/services/desktop.scm (enlightenment-setuid-programs): Return
setuid-programs.
(%desktop-services)[mount-setuid-helpers]: Use setuid-programs.
* gnu/services/docker.scm (singularity-setuid-programs): Return
setuid-programs.
* gnu/services/xorg.scm(screen-locker-setuid-programs): Return
setuid-programs.
* gnu/system.scm (%setuid-programs): Return setuid-programs.
* doc/guix.texi (Setuid Programs, operating-system Reference): Replace
'list of G-expressions' with 'list of <setuid-program>'.
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/guix.texi | 19 |
1 files changed, 11 insertions, 8 deletions
diff --git a/doc/guix.texi b/doc/guix.texi index 3c23ae46c00..2298d512a1e 100644 --- a/doc/guix.texi +++ b/doc/guix.texi | |||
| @@ -13905,8 +13905,8 @@ Linux @dfn{pluggable authentication module} (PAM) services. | |||
| 13905 | @c FIXME: Add xref to PAM services section. | 13905 | @c FIXME: Add xref to PAM services section. |
| 13906 | 13906 | ||
| 13907 | @item @code{setuid-programs} (default: @code{%setuid-programs}) | 13907 | @item @code{setuid-programs} (default: @code{%setuid-programs}) |
| 13908 | List of string-valued G-expressions denoting setuid programs. | 13908 | List of @code{<setuid-program>}. @xref{Setuid Programs}, for more |
| 13909 | @xref{Setuid Programs}. | 13909 | information. |
| 13910 | 13910 | ||
| 13911 | @item @code{sudoers-file} (default: @code{%sudoers-specification}) | 13911 | @item @code{sudoers-file} (default: @code{%sudoers-specification}) |
| 13912 | @cindex sudoers file | 13912 | @cindex sudoers file |
| @@ -32389,13 +32389,15 @@ the store, we let the system administrator @emph{declare} which programs | |||
| 32389 | should be setuid root. | 32389 | should be setuid root. |
| 32390 | 32390 | ||
| 32391 | The @code{setuid-programs} field of an @code{operating-system} | 32391 | The @code{setuid-programs} field of an @code{operating-system} |
| 32392 | declaration contains a list of G-expressions denoting the names of | 32392 | declaration contains a list of @code{<setuid-program>} denoting the |
| 32393 | programs to be setuid-root (@pxref{Using the Configuration System}). | 32393 | names of programs to have a setuid or setgid bit set (@pxref{Using the |
| 32394 | For instance, the @command{passwd} program, which is part of the Shadow | 32394 | Configuration System}). For instance, the @command{passwd} program, |
| 32395 | package, can be designated by this G-expression (@pxref{G-Expressions}): | 32395 | which is part of the Shadow package, with a setuid root can be |
| 32396 | designated like this: | ||
| 32396 | 32397 | ||
| 32397 | @example | 32398 | @example |
| 32398 | #~(string-append #$shadow "/bin/passwd") | 32399 | (setuid-program |
| 32400 | (program (file-append #$shadow "/bin/passwd"))) | ||
| 32399 | @end example | 32401 | @end example |
| 32400 | 32402 | ||
| 32401 | @deftp {Data Type} setuid-program | 32403 | @deftp {Data Type} setuid-program |
| @@ -32426,7 +32428,8 @@ A default set of setuid programs is defined by the | |||
| 32426 | @code{%setuid-programs} variable of the @code{(gnu system)} module. | 32428 | @code{%setuid-programs} variable of the @code{(gnu system)} module. |
| 32427 | 32429 | ||
| 32428 | @defvr {Scheme Variable} %setuid-programs | 32430 | @defvr {Scheme Variable} %setuid-programs |
| 32429 | A list of G-expressions denoting common programs that are setuid-root. | 32431 | A list of @code{<setuid-program>} denoting common programs that are |
| 32432 | setuid-root. | ||
| 32430 | 32433 | ||
| 32431 | The list includes commands such as @command{passwd}, @command{ping}, | 32434 | The list includes commands such as @command{passwd}, @command{ping}, |
| 32432 | @command{su}, and @command{sudo}. | 32435 | @command{su}, and @command{sudo}. |
