rebmit/nixos-config
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

services/nscd: use tmpfiles for proper lifetime guarantees

Browse source
This commit is contained in:
Lu Wang 2024-12-30 02:27:37 +08:00
parent 0c28d393fa
commit a335722afd
Signed by: rebmit
SSH key fingerprint: SHA256:3px8QV1zEerIrEWHaqtH5rR9kjetyRST5EipOPrd+bU
1 changed files with 15 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
nixos/profiles/services/nscd/default.nix
View file

@ -1,4 +1,9 @@
{ lib, mylib, ... }: {
config,
lib,
mylib,
...
}:
{ {
services.nscd = { services.nscd = {
enable = true; enable = true;
@ -6,7 +11,15 @@
}; };
systemd.services.nscd.serviceConfig = mylib.misc.serviceHardened // { systemd.services.nscd.serviceConfig = mylib.misc.serviceHardened // {
RuntimeDirectoryPreserve = true; RuntimeDirectory = lib.mkForce "";
ProtectHome = lib.mkForce true; ProtectHome = lib.mkForce true;
}; };
systemd.tmpfiles.settings."20-nscd" = {
"/run/nscd".d = {
mode = "0755";
user = config.services.nscd.user;
group = config.services.nscd.group;
};
};
} }