From 0209b3499fe5582b42e21db2cebd9940c7ebc76e Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Fri, 10 Dec 2021 23:29:17 +0100
Subject: tv mu: use krebs.setuid

---
 tv/1systems/mu/config.nix | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

(limited to 'tv/1systems/mu/config.nix')

diff --git a/tv/1systems/mu/config.nix b/tv/1systems/mu/config.nix
index 8fd6ee45b..7c3f8cfdb 100644
--- a/tv/1systems/mu/config.nix
+++ b/tv/1systems/mu/config.nix
@@ -83,8 +83,11 @@ with import <stockholm/lib>;
 
   programs.ssh.startAgent = false;
 
-  security.wrappers = {
-    slock.source = "${pkgs.slock}/bin/slock";
+  krebs.setuid = {
+    slock = {
+      filename = "${pkgs.slock}/bin/slock";
+      mode = "4111";
+    };
   };
 
   security.pam.loginLimits = [
-- 
cgit v1.2.3