about summary refs log tree commit diff
diff options
context:
space:
mode:
-rw-r--r--nixos/modules/security/chromium-suid-sandbox.nix6
1 files changed, 5 insertions, 1 deletions
diff --git a/nixos/modules/security/chromium-suid-sandbox.nix b/nixos/modules/security/chromium-suid-sandbox.nix
index 88fbe518c2deb..6fe252136390a 100644
--- a/nixos/modules/security/chromium-suid-sandbox.nix
+++ b/nixos/modules/security/chromium-suid-sandbox.nix
@@ -27,6 +27,10 @@ in
 
   config = mkIf cfg.enable {
     environment.systemPackages = [ sandbox ];
-    security.setuidPrograms    = [ sandbox.passthru.sandboxExecutableName ];
+    security.permissionsWrappers.setuid = [
+      { program = sandbox.passthru.sandboxExecutableName;
+        source  = "${sandbox}/bin/${sandbox.passthru.sandboxExecutableName}";
+      }
+    ];
   };
 }