commit a0afc49f0f199c73e1173ede7d58d74842c4551d · pyrox.dev/nixpkgs

pyrox.dev / nixpkgs

lol

fork atom

dspam service: restrict socket access

Nikolay Amiantov 9 years ago a0afc49f 2cee5a42

options

unified split

Changed files

nixos

modules

services

mail

dspam.nix

nixos/modules/services/mail/dspam.nix

···

       111
       111
        
                 User = cfg.user;

     

       112
       112
        
                 Group = cfg.group;

     

       113
       113
        
                 RuntimeDirectory = optional (cfg.domainSocket == defaultSock) "dspam";

     

       114
       114
       +
                 RuntimeDirectoryMode = optional (cfg.domainSocket == defaultSock) "0750";

     

       114
       115
        
                 PermissionsStartOnly = true;

     

       115
       116
        
                 # DSPAM segfaults on just about every error

     

       116
       117
        
                 Restart = "on-failure";