summaryrefslogtreecommitdiffstats
path: root/nixos/modules/virtualisation/virtualbox-host.nix
diff options
context:
space:
mode:
authorBjørn Forsman <bjorn.forsman@gmail.com>2017-02-14 22:56:37 +0100
committerBjørn Forsman <bjorn.forsman@gmail.com>2017-02-15 07:25:33 +0100
commit34c1b74421f2c158dfb9f54c2855fd7b74ba1bc7 (patch)
treec29a404c798acec3ff6dcc802b2db71b9f66831a /nixos/modules/virtualisation/virtualbox-host.nix
parent448acd8e5e722bbd6396f6d069bf1b06993f72d0 (diff)
nixos/virtualbox: unbreak wrt. new security.wrappers
The new option takes an attrset, not a list.
Diffstat (limited to 'nixos/modules/virtualisation/virtualbox-host.nix')
-rw-r--r--nixos/modules/virtualisation/virtualbox-host.nix9
1 files changed, 5 insertions, 4 deletions
diff --git a/nixos/modules/virtualisation/virtualbox-host.nix b/nixos/modules/virtualisation/virtualbox-host.nix
index 501ed9bc6839..bb0c38bd4eb8 100644
--- a/nixos/modules/virtualisation/virtualbox-host.nix
+++ b/nixos/modules/virtualisation/virtualbox-host.nix
@@ -69,13 +69,14 @@ in
environment.systemPackages = [ virtualbox ];
security.wrappers = let
- mkSuid = program: {"${program}" = {
+ mkSuid = program: {
source = "${virtualbox}/libexec/virtualbox/${program}";
owner = "root";
group = "vboxusers";
setuid = true;
- };};
- in mkIf cfg.enableHardening (map mkSuid [
+ };
+ in mkIf cfg.enableHardening
+ (builtins.listToAttrs (map (x: { name = x; value = mkSuid x; }) [
"VBoxHeadless"
"VBoxNetAdpCtl"
"VBoxNetDHCP"
@@ -83,7 +84,7 @@ in
"VBoxSDL"
"VBoxVolInfo"
"VirtualBox"
- ]);
+ ]));
users.extraGroups.vboxusers.gid = config.ids.gids.vboxusers;