commit 1e8b8e6d38be9bc0ec887e71e4ee8b0f50a4ddcd · pyrox.dev/nixpkgs

pyrox.dev / nixpkgs

lol

nixos/usbguard: don't use path literal for pure evaluation

PR#256295 reintroduced ruleFile option, but set the default as a path
literal, which was a "string path" previously. This breaks evaluation
for being impure:

error: access to absolute path '/var/lib/usbguard/rules.conf' is forbidden in pure eval mode (use '--impure' to override)

Andreas Wiese 2 years ago 1e8b8e6d 0dd34529

options

unified split

Changed files

+2 -2

nixos

modules

services

security

usbguard.nix

+2 -2

nixos/modules/services/security/usbguard.nix

···

       51
       51
        
       

     

       52
       52
        
             ruleFile = mkOption {

     

       53
       53
        
               type = types.nullOr types.path;

     

       54
       54
       -
               default = /var/lib/usbguard/rules.conf;

     

       55
       55
       -
               example = /run/secrets/usbguard-rules;

     

       54
       54
       +
               default = "/var/lib/usbguard/rules.conf";

     

       55
       55
       +
               example = "/run/secrets/usbguard-rules";

     

       56
       56
        
               description = lib.mdDoc ''

     

       57
       57
        
                 This tells the USBGuard daemon which file to load as policy rule set.

     

       58
       58