makefu/stockholm
1
0
Fork 0
Code Issues Pull requests Actions1 Packages Projects Releases Wiki Activity

l domsen: run verify_arg as root

Browse source
This commit is contained in:
lassulus 2019-04-17 20:16:06 +02:00
parent 47c4919a06
commit 24d7e2fa03
2 changed files with 5 additions and 1 deletions
lass
2configs/websites
domsen.nix
3modules
usershadow.nix

2
lass/2configs/websites/domsen.nix
View file

@ -119,7 +119,7 @@ in {
authenticators.PLAIN = ''
driver = plaintext
public_name = PLAIN
server_condition = ''${run{${config.lass.usershadow.path}/bin/verify_arg ${config.lass.usershadow.pattern} $auth2 $auth3}{yes}{no}}
server_condition = ''${run{/run/wrappers/bin/shadow_verify_arg ${config.lass.usershadow.pattern} $auth2 $auth3}{yes}{no}}
'';
authenticators.LOGIN = ''
driver = plaintext

4
lass/3modules/usershadow.nix
View file

@ -45,6 +45,10 @@
source = "${usershadow}/bin/verify_pam";
owner = "root";
};
security.wrappers.shadow_verify_arg = {
source = "${usershadow}/bin/verify_arg";
owner = "root";
};
};
usershadow = let {