summaryrefslogtreecommitdiffstats
path: root/krebs/3modules/setuid.nix
diff options
context:
space:
mode:
authortv <tv@krebsco.de>2022-01-27 05:37:32 +0100
committertv <tv@krebsco.de>2022-01-27 05:37:32 +0100
commitad6f0cd9014e13478a622786b9643970bae1c90a (patch)
tree927eaeb688a880117913312e542a043a43769216 /krebs/3modules/setuid.nix
parent10891882ab4787c958e3473d595a7f8ce9551dcf (diff)
krebs.setuid: remove security.wrappers's cruft
Diffstat (limited to 'krebs/3modules/setuid.nix')
-rw-r--r--krebs/3modules/setuid.nix7
1 files changed, 6 insertions, 1 deletions
diff --git a/krebs/3modules/setuid.nix b/krebs/3modules/setuid.nix
index 11c5e9d75..b141c7de4 100644
--- a/krebs/3modules/setuid.nix
+++ b/krebs/3modules/setuid.nix
@@ -80,7 +80,12 @@ with import <stockholm/lib>;
imp = {
system.activationScripts."krebs.setuid" = stringAfter [ "wrappers" ]
- (concatMapStringsSep "\n" (getAttr "activate") (attrValues config.krebs.setuid));
+ (concatMapStringsSep "\n"
+ (cfg: /* sh */ ''
+ ${cfg.activate}
+ rm -f ${cfg.wrapperDir}/${cfg.name}.real
+ '')
+ (attrValues config.krebs.setuid));
};
in out