me/guix
Archived
1
0
Fork 0
Code Activity

services: %desktop-services: Setuid root NTFS and NFS mount helpers.

Browse source 
Fixes <https://issues.guix.info/39670>.

Combined with commit def6e2ae46, this allows unprivileged users to mount file
systems marked with the "user" option.  It adds less than 4 MiB to the closure
of the lightweight-desktop.tmpl operating system template.

* gnu/services/desktop.scm (%desktop-services): Extend the
setuid-program-service-type service with the 'mount.nfs' and 'mount.nfs-3g'
programs.

Reported-by: Nathan Dehnel <ncdehnel@gmail.com>
This commit is contained in:
Maxim Cournoyer 2020-09-24 15:30:18 -04:00
parent c5cf45e906
commit d40c9f6c85
No known key found for this signature in database
GPG key ID: 1260E46482E63562
1 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
gnu/services/desktop.scm
View file

@ -3,7 +3,7 @@
;;; Copyright © 2015 Andy Wingo <wingo@igalia.com> ;;; Copyright © 2015 Andy Wingo <wingo@igalia.com>
;;; Copyright © 2015 Mark H Weaver <mhw@netris.org> ;;; Copyright © 2015 Mark H Weaver <mhw@netris.org>
;;; Copyright © 2016 Sou Bunnbu <iyzsong@gmail.com> ;;; Copyright © 2016 Sou Bunnbu <iyzsong@gmail.com>
;;; Copyright © 2017 Maxim Cournoyer <maxim.cournoyer@gmail.com> ;;; Copyright © 2017, 2020 Maxim Cournoyer <maxim.cournoyer@gmail.com>
;;; Copyright © 2017 Nikita <nikita@n0.is> ;;; Copyright © 2017 Nikita <nikita@n0.is>
;;; Copyright © 2018, 2020 Efraim Flashner <efraim@flashner.co.il> ;;; Copyright © 2018, 2020 Efraim Flashner <efraim@flashner.co.il>
;;; Copyright © 2018 Ricardo Wurmus <rekado@elephly.net> ;;; Copyright © 2018 Ricardo Wurmus <rekado@elephly.net>
@ -54,6 +54,7 @@
#:use-module (gnu packages linux) #:use-module (gnu packages linux)
#:use-module (gnu packages libusb) #:use-module (gnu packages libusb)
#:use-module (gnu packages mate) #:use-module (gnu packages mate)
#:use-module (gnu packages nfs)
#:use-module (gnu packages enlightenment) #:use-module (gnu packages enlightenment)
#:use-module (guix deprecation) #:use-module (guix deprecation)
#:use-module (guix records) #:use-module (guix records)
@ -1206,6 +1207,12 @@ or setting its password with passwd.")))
;; perform administrative tasks (similar to "sudo"). ;; perform administrative tasks (similar to "sudo").
polkit-wheel-service polkit-wheel-service
;; Allow desktop users to also mount NTFS and NFS file systems
;; without root.
(simple-service 'mount-setuid-helpers setuid-program-service-type
(list (file-append nfs-utils "/sbin/mount.nfs")
(file-append ntfs-3g "/sbin/mount.ntfs-3g")))
;; The global fontconfig cache directory can sometimes contain ;; The global fontconfig cache directory can sometimes contain
;; stale entries, possibly referencing fonts that have been GC'd, ;; stale entries, possibly referencing fonts that have been GC'd,
;; so mount it read-only. ;; so mount it read-only.