ryan77627/guix
1
0
Fork 0
mirror of https://git.in.rschanz.org/ryan77627/guix.git synced 2024-12-25 22:08:16 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

system: Add (gnu system privilege).

Browse source 
* gnu/system/privilege.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
This commit is contained in:
Tobias Geerinckx-Rice 2022-06-05 02:00:00 +02:00
parent 902b15b24d
commit 39471f2627
No known key found for this signature in database
GPG key ID: 0DB0FF884F556D79
2 changed files with 55 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
gnu/local.mk
View file

@ -771,6 +771,7 @@ GNU_SYSTEM_MODULES = \
%D%/system/mapped-devices.scm \
%D%/system/nss.scm \
%D%/system/pam.scm \
%D%/system/privilege.scm \
%D%/system/setuid.scm \
%D%/system/shadow.scm \
%D%/system/uuid.scm \

54
gnu/system/privilege.scm Normal file
View file

@ -0,0 +1,54 @@
;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2021 Brice Waegeneire <brice@waegenei.re>
;;; Copyright © 2022 Tobias Geerinckx-Rice <me@tobias.gr>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix. If not, see <http://www.gnu.org/licenses/>.
(define-module (gnu system privilege)
#:use-module (guix records)
#:export (privileged-program
privileged-program?
privileged-program-program
privileged-program-setuid?
privileged-program-setgid?
privileged-program-user
privileged-program-group))
;;; Commentary:
;;;
;;; Data structures representing privileged programs: binaries with additional
;;; permissions such as setuid/setgid. This is meant to be used both on the
;;; host side and at run time--e.g., in activation snippets.
;;;
;;; Code:
(define-record-type* <privileged-program>
privileged-program make-privileged-program
privileged-program?
;; File name of the program to assign elevated privileges.
(program privileged-program-program) ;file-like
;; Whether to set the setuid (‘set user ID’) bit.
(setuid? privileged-program-setuid? ;boolean
(default #f))
;; Whether to set the setgid (‘set group ID’) bit.
(setgid? privileged-program-setgid? ;boolean
(default #f))
;; The user name or ID this should be set to (defaults to root's).
(user privileged-program-user ;integer or string
(default 0))
;; The group name or ID we want to set this to (defaults to root's).
(group privileged-program-group ;integer or string
(default 0)))