From eeaed9a9041e3456fbd3eded4326cf336ae33a33 Mon Sep 17 00:00:00 2001
From: "Jeffrey C. Ollie" <jeff@ocjtech.us>
Date: Sat, 14 Feb 2026 13:35:42 -0600
Subject: [PATCH] more permission fixes

---
 flake.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/flake.nix b/flake.nix
index dfa70c6..0b27178 100644
--- a/flake.nix
+++ b/flake.nix
@@ -448,10 +448,10 @@
                 cp "$tmp" etc/group
               '';
               fakeRootCommands = ''
-                chmod 4555 sbin/sudo
-                chmod 1777 tmp
-                chmod 1777 var/tmp
-                chmod 0666 nix/var/nix/db/big-lock
+                chmod u=rws,g=rw,o=rw sbin/sudo
+                chmod u=rwxt,u=rwx,o=rwx tmp
+                chmod u=rwxt,u=rwx,o=rwx var/tmp
+                chmod -R a+rwX nix/var/nix/db
                 chown 1001:1001 github
                 chown 1001:1001 github/home
                 chown 1001:1001 github/home/.nix-defexpr
-- 
2.51.2