From 813e29c498ca3f7a93dcf47af7e485c716f7b08f Mon Sep 17 00:00:00 2001
From: lassulus <lassulus@lassul.us>
Date: Wed, 8 Dec 2021 11:30:42 +0100
Subject: l usershadow: setuid for verify commands

---
 lass/3modules/usershadow.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lass/3modules/usershadow.nix b/lass/3modules/usershadow.nix
index b1011ced..094d37a3 100644
--- a/lass/3modules/usershadow.nix
+++ b/lass/3modules/usershadow.nix
@@ -36,11 +36,13 @@
     '';
 
     security.wrappers.shadow_verify_pam = {
+      setuid = true;
       source = "${usershadow}/bin/verify_pam";
       owner = "root";
       group = "root";
     };
     security.wrappers.shadow_verify_arg = {
+      setuid = true;
       source = "${usershadow}/bin/verify_arg";
       owner = "root";
       group = "root";
-- 
cgit v1.2.3