tv mu: use krebs.setuid

This commit is contained in:
tv 2021-12-10 23:29:17 +01:00
parent 210c032fca
commit 0209b3499f

View file

@ -83,8 +83,11 @@ with import <stockholm/lib>;
programs.ssh.startAgent = false;
security.wrappers = {
slock.source = "${pkgs.slock}/bin/slock";
krebs.setuid = {
slock = {
filename = "${pkgs.slock}/bin/slock";
mode = "4111";
};
};
security.pam.loginLimits = [