me/guix
Archived
1
0
Fork 0
Code Activity

activation: Set the permissions of /etc/sudoers to 440.

Browse source 
* gnu/build/activation.scm (activate-etc): Move 'rm-f' to a local
  'define'.  When TARGET is "sudoers", make it 440.
This commit is contained in:
Ludovic Courtès 2014-09-11 23:23:07 +02:00
parent c851400bee
commit ee7bae3bbd
1 changed files with 31 additions and 25 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
gnu/build/activation.scm
View file

@ -147,9 +147,11 @@ numeric gid or #f."
;; /etc is a mixture of static and dynamic settings. Here is where we ;; /etc is a mixture of static and dynamic settings. Here is where we
;; initialize it from the static part. ;; initialize it from the static part.
(define (rm-f file)
(false-if-exception (delete-file file)))
(format #t "populating /etc from ~a...~%" etc) (format #t "populating /etc from ~a...~%" etc)
(let ((rm-f (lambda (f)
(false-if-exception (delete-file f)))))
(rm-f "/etc/static") (rm-f "/etc/static")
(symlink etc "/etc/static") (symlink etc "/etc/static")
(for-each (lambda (file) (for-each (lambda (file)
@ -163,7 +165,11 @@ numeric gid or #f."
;; symlinking them. ;; symlinking them.
(if (file-is-directory? source) (if (file-is-directory? source)
(symlink source target) (symlink source target)
(copy-file source target)))) (copy-file source target))
;; XXX: Dirty hack to meet sudo's expectations.
(when (string=? (basename target) "sudoers")
(chmod target #o440))))
(scandir etc (scandir etc
(lambda (file) (lambda (file)
(not (member file '("." "..")))) (not (member file '("." ".."))))
@ -175,7 +181,7 @@ numeric gid or #f."
;; Prevent ETC from being GC'd. ;; Prevent ETC from being GC'd.
(rm-f "/var/guix/gcroots/etc-directory") (rm-f "/var/guix/gcroots/etc-directory")
(symlink etc "/var/guix/gcroots/etc-directory"))) (symlink etc "/var/guix/gcroots/etc-directory"))
(define %setuid-directory (define %setuid-directory
;; Place where setuid programs are stored. ;; Place where setuid programs are stored.