commit 783e55b0be286e4350dc9b9f834a8b6f79895c8f · pyrox.dev/nixpkgs

+7 -1

nixos/modules/services/security/endlessh-go.nix

···

       110
        
                   );

     

       111
        
                 DynamicUser = true;

     

       112
        
                 RootDirectory = rootDirectory;

     

       113
       -
                 BindReadOnlyPaths = [ builtins.storeDir ];

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       114
        
                 InaccessiblePaths = [ "-+${rootDirectory}" ];

     

       115
        
                 RuntimeDirectory = baseNameOf rootDirectory;

     

       116
        
                 RuntimeDirectoryMode = "700";

···

       110
        
                   );

     

       111
        
                 DynamicUser = true;

     

       112
        
                 RootDirectory = rootDirectory;

     

       113
       +
                 BindReadOnlyPaths = [

     

       114
       +
                   builtins.storeDir

     

       115
       +
                   "-/etc/hosts"

     

       116
       +
                   "-/etc/localtime"

     

       117
       +
                   "-/etc/nsswitch.conf"

     

       118
       +
                   "-/etc/resolv.conf"

     

       119
       +
                 ];

     

       120
        
                 InaccessiblePaths = [ "-+${rootDirectory}" ];

     

       121
        
                 RuntimeDirectory = baseNameOf rootDirectory;

     

       122
        
                 RuntimeDirectoryMode = "700";