summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorBrice Waegeneire <brice@waegenei.re>2021-07-06 22:03:20 +0200
committerChristopher Lemmer Webber <cwebber@dustycloud.org>2021-07-29 11:32:48 -0400
commita85ec0bf69df9ec3333a214feff54d4e58b15bec (patch)
tree3f5623ae3651936d9106bd139b4b66ffc834277b /doc
parenta7ac19851baab3fbcc40c4b2cf5b00a6ac9cd2f3 (diff)
services: Migrate to <setuid-program>.
* gnu/services/dbus.scm (dbus-setuid-programs, polkit-setuid-programs): Return setuid-programs. * gnu/services/desktop.scm (enlightenment-setuid-programs): Return setuid-programs. (%desktop-services)[mount-setuid-helpers]: Use setuid-programs. * gnu/services/docker.scm (singularity-setuid-programs): Return setuid-programs. * gnu/services/xorg.scm(screen-locker-setuid-programs): Return setuid-programs. * gnu/system.scm (%setuid-programs): Return setuid-programs. * doc/guix.texi (Setuid Programs, operating-system Reference): Replace 'list of G-expressions' with 'list of <setuid-program>'.
Diffstat (limited to 'doc')
-rw-r--r--doc/guix.texi19
1 files changed, 11 insertions, 8 deletions
diff --git a/doc/guix.texi b/doc/guix.texi
index 3c23ae46c00..2298d512a1e 100644
--- a/doc/guix.texi
+++ b/doc/guix.texi
@@ -13905,8 +13905,8 @@ Linux @dfn{pluggable authentication module} (PAM) services.
13905@c FIXME: Add xref to PAM services section. 13905@c FIXME: Add xref to PAM services section.
13906 13906
13907@item @code{setuid-programs} (default: @code{%setuid-programs}) 13907@item @code{setuid-programs} (default: @code{%setuid-programs})
13908List of string-valued G-expressions denoting setuid programs. 13908List of @code{<setuid-program>}. @xref{Setuid Programs}, for more
13909@xref{Setuid Programs}. 13909information.
13910 13910
13911@item @code{sudoers-file} (default: @code{%sudoers-specification}) 13911@item @code{sudoers-file} (default: @code{%sudoers-specification})
13912@cindex sudoers file 13912@cindex sudoers file
@@ -32389,13 +32389,15 @@ the store, we let the system administrator @emph{declare} which programs
32389should be setuid root. 32389should be setuid root.
32390 32390
32391The @code{setuid-programs} field of an @code{operating-system} 32391The @code{setuid-programs} field of an @code{operating-system}
32392declaration contains a list of G-expressions denoting the names of 32392declaration contains a list of @code{<setuid-program>} denoting the
32393programs to be setuid-root (@pxref{Using the Configuration System}). 32393names of programs to have a setuid or setgid bit set (@pxref{Using the
32394For instance, the @command{passwd} program, which is part of the Shadow 32394Configuration System}). For instance, the @command{passwd} program,
32395package, can be designated by this G-expression (@pxref{G-Expressions}): 32395which is part of the Shadow package, with a setuid root can be
32396designated like this:
32396 32397
32397@example 32398@example
32398#~(string-append #$shadow "/bin/passwd") 32399(setuid-program
32400 (program (file-append #$shadow "/bin/passwd")))
32399@end example 32401@end example
32400 32402
32401@deftp {Data Type} setuid-program 32403@deftp {Data Type} setuid-program
@@ -32426,7 +32428,8 @@ A default set of setuid programs is defined by the
32426@code{%setuid-programs} variable of the @code{(gnu system)} module. 32428@code{%setuid-programs} variable of the @code{(gnu system)} module.
32427 32429
32428@defvr {Scheme Variable} %setuid-programs 32430@defvr {Scheme Variable} %setuid-programs
32429A list of G-expressions denoting common programs that are setuid-root. 32431A list of @code{<setuid-program>} denoting common programs that are
32432setuid-root.
32430 32433
32431The list includes commands such as @command{passwd}, @command{ping}, 32434The list includes commands such as @command{passwd}, @command{ping},
32432@command{su}, and @command{sudo}. 32435@command{su}, and @command{sudo}.