From fb1e06fc5f7648ab3078876f009fa7a983b17c41 Mon Sep 17 00:00:00 2001 From: Mark H Weaver Date: Mon, 27 Jul 2015 00:09:14 -0400 Subject: PRELIMINARY: Add three programs to %setuid-programs. --- gnu/system.scm | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) (limited to 'gnu/system.scm') diff --git a/gnu/system.scm b/gnu/system.scm index ea6e9c13ea..a809451388 100644 --- a/gnu/system.scm +++ b/gnu/system.scm @@ -42,6 +42,8 @@ #:use-module (gnu packages man) #:use-module (gnu packages compression) #:use-module (gnu packages firmware) + #:use-module (gnu packages glib) + #:use-module (gnu packages polkit) #:autoload (gnu packages cryptsetup) (cryptsetup) #:use-module (gnu services) #:use-module (gnu services dmd) @@ -637,13 +639,18 @@ use 'plain-file' instead~%") (define %setuid-programs ;; Default set of setuid-root programs. - (let ((shadow (@ (gnu packages admin) shadow))) + (let ((shadow (@ (gnu packages admin) shadow)) + ;; XXX Remove this hack when the main 'dbus' package is fixed. + (dbus (@@ (gnu packages glib) dbus-fixed))) (list #~(string-append #$shadow "/bin/passwd") #~(string-append #$shadow "/bin/su") #~(string-append #$inetutils "/bin/ping") #~(string-append #$inetutils "/bin/ping6") #~(string-append #$sudo "/bin/sudo") - #~(string-append #$fuse "/bin/fusermount")))) + #~(string-append #$fuse "/bin/fusermount") + #~(string-append #$dbus "/libexec/dbus-daemon-launch-helper") ; XXX should be group "messagebus" and mode 4550 + #~(string-append #$polkit "/bin/pkexec") + #~(string-append #$polkit "/lib/polkit-1/polkit-agent-helper-1")))) (define %sudoers-specification ;; Default /etc/sudoers contents: 'root' and all members of the 'wheel' -- cgit 1.4.1