55 lines
2 KiB
Nix
55 lines
2 KiB
Nix
{
|
|
pkgs, nix-gaming, ...
|
|
}: let
|
|
wine = (nix-gaming.packages.x86_64-linux.wine-ge.overrideAttrs (super: {
|
|
patches = super.patches or [] ++ [
|
|
./wine/server-default_integrity/0001-server-Create-processes-using-a-limited-administrato.patch
|
|
./wine/server-default_integrity/0002-shell32-Implement-the-runas-verb.patch
|
|
./wine/server-default_integrity/0003-wine.inf-Set-the-EnableLUA-value-to-1.patch
|
|
./wine/server-default_integrity/0004-msi-Create-the-custom-action-server-as-an-elevated-p.patch
|
|
./wine/server-default_integrity/0005-ntdll-Always-start-the-initial-process-through-start.patch
|
|
./wine/server-default_integrity/0006-kernelbase-Elevate-processes-if-requested-in-CreateP.patch
|
|
./wine/server-default_integrity/0007-ntdll-Elevate-processes-if-requested-in-RtlCreateUse.patch
|
|
];
|
|
}));
|
|
in
|
|
{
|
|
environment.systemPackages = [
|
|
wine
|
|
];
|
|
security.wrappers.wine = {
|
|
source = "${wine}/bin/wine";
|
|
capabilities = "cap_net_raw,cap_net_admin,cap_sys_ptrace=eip";
|
|
owner = "root";
|
|
group = "dialout";
|
|
permissions = "u+rx,g+x";
|
|
};
|
|
security.wrappers.wine64 = {
|
|
source = "${wine}/bin/wine64-preloader";
|
|
capabilities = "cap_net_raw,cap_net_admin,cap_sys_ptrace=eip";
|
|
owner = "root";
|
|
group = "dialout";
|
|
permissions = "u+rx,g+x";
|
|
};
|
|
security.wrappers.wine-preloader = {
|
|
source = "${wine}/bin/wine-preloader";
|
|
capabilities = "cap_net_raw,cap_net_admin,cap_sys_ptrace=eip";
|
|
owner = "root";
|
|
group = "dialout";
|
|
permissions = "u+rx,g+x";
|
|
};
|
|
security.wrappers.wine64-preloader = {
|
|
source = "${wine}/bin/wine64-preloader";
|
|
capabilities = "cap_net_raw,cap_net_admin,cap_sys_ptrace=eip";
|
|
owner = "root";
|
|
group = "dialout";
|
|
permissions = "u+rx,g+x";
|
|
};
|
|
security.wrappers.wineserver = {
|
|
source = "${wine}/bin/wineserver";
|
|
capabilities = "cap_net_raw,cap_net_admin,cap_sys_ptrace=eip";
|
|
owner = "root";
|
|
group = "dialout";
|
|
permissions = "u+rx,g+x";
|
|
};
|
|
}
|