summary refs log tree commit diff
path: root/gnu/system.scm
diff options
context:
space:
mode:
authorMark H Weaver <mhw@netris.org>2015-07-27 00:09:14 -0400
committerMark H Weaver <mhw@netris.org>2015-08-18 23:52:57 -0400
commitfb1e06fc5f7648ab3078876f009fa7a983b17c41 (patch)
treed1defcc2e6b48a427b1f67dc8359a0f3a1cc74f6 /gnu/system.scm
parent86e3f95a09d903debba38cd1ff5dfd953f34a765 (diff)
downloadguix-fb1e06fc5f7648ab3078876f009fa7a983b17c41.tar.gz
PRELIMINARY: Add three programs to %setuid-programs.
Diffstat (limited to 'gnu/system.scm')
-rw-r--r--gnu/system.scm11
1 files changed, 9 insertions, 2 deletions
diff --git a/gnu/system.scm b/gnu/system.scm
index ea6e9c13ea..a809451388 100644
--- a/gnu/system.scm
+++ b/gnu/system.scm
@@ -42,6 +42,8 @@
   #:use-module (gnu packages man)
   #:use-module (gnu packages compression)
   #:use-module (gnu packages firmware)
+  #:use-module (gnu packages glib)
+  #:use-module (gnu packages polkit)
   #:autoload   (gnu packages cryptsetup) (cryptsetup)
   #:use-module (gnu services)
   #:use-module (gnu services dmd)
@@ -637,13 +639,18 @@ use 'plain-file' instead~%")
 
 (define %setuid-programs
   ;; Default set of setuid-root programs.
-  (let ((shadow (@ (gnu packages admin) shadow)))
+  (let ((shadow (@ (gnu packages admin) shadow))
+        ;; XXX Remove this hack when the main 'dbus' package is fixed.
+        (dbus (@@ (gnu packages glib) dbus-fixed)))
     (list #~(string-append #$shadow "/bin/passwd")
           #~(string-append #$shadow "/bin/su")
           #~(string-append #$inetutils "/bin/ping")
           #~(string-append #$inetutils "/bin/ping6")
           #~(string-append #$sudo "/bin/sudo")
-          #~(string-append #$fuse "/bin/fusermount"))))
+          #~(string-append #$fuse "/bin/fusermount")
+          #~(string-append #$dbus "/libexec/dbus-daemon-launch-helper")  ; XXX should be group "messagebus" and mode 4550
+          #~(string-append #$polkit "/bin/pkexec")
+          #~(string-append #$polkit "/lib/polkit-1/polkit-agent-helper-1"))))
 
 (define %sudoers-specification
   ;; Default /etc/sudoers contents: 'root' and all members of the 'wheel'