summaryrefslogtreecommitdiffstats
path: root/krebs/3modules/exim.nix
diff options
context:
space:
mode:
authormakefu <github@syntax-fehler.de>2023-12-04 15:06:05 +0100
committermakefu <github@syntax-fehler.de>2023-12-04 15:06:05 +0100
commit2ca25d5fc3b5bcabe15b0934208b5f5201420eb2 (patch)
treee41e5c3114a57555eca53b4521b99c22ea2056ba /krebs/3modules/exim.nix
parentf157c7b47f249470b4f5cebdc53ce391d938b0b4 (diff)
parentc660bedbb94a9a08c50050a3447f4fc5ba90fd69 (diff)
Merge remote-tracking branch 'lass/master'
Diffstat (limited to 'krebs/3modules/exim.nix')
-rw-r--r--krebs/3modules/exim.nix14
1 files changed, 9 insertions, 5 deletions
diff --git a/krebs/3modules/exim.nix b/krebs/3modules/exim.nix
index 917a8e5a4..583fd07b1 100644
--- a/krebs/3modules/exim.nix
+++ b/krebs/3modules/exim.nix
@@ -50,14 +50,18 @@ in {
'';
systemPackages = [ pkgs.exim ];
};
- krebs.setuid = {
+ security.wrappers = {
exim = {
- filename = "${pkgs.exim}/bin/exim";
- mode = "4111";
+ source = "${pkgs.exim}/bin/exim";
+ owner = "root";
+ group = "root";
+ setuid = true;
};
sendmail = {
- filename = "${pkgs.exim}/bin/exim";
- mode = "4111";
+ source = "${pkgs.exim}/bin/exim";
+ owner = "root";
+ group = "root";
+ setuid = true;
};
};
systemd.services.exim = {