NetworkManager-dispatcher: note why we cant use DynamicUser

2024-06-03 15:57:41 +00:00 · 2024-06-03 15:57:41 +00:00 · 0e2d86ac96
commit 0e2d86ac96
parent e2a1e6730d
1 changed files with 1 additions and 0 deletions
--- a/hosts/common/net/networkmanager.nix
+++ b/hosts/common/net/networkmanager.nix
@ -121,6 +121,7 @@ in {
    # serviceConfig.Restart = "always";
    # serviceConfig.RestartSec = "1s";

+    # serviceConfig.DynamicUser = true;  #< not possible, else we lose group perms (so can't write to `trust-dns`'s files in the nm hook)
    serviceConfig.User = "networkmanager";  # TODO: should arguably use `DynamicUser`
    serviceConfig.Group = "networkmanager";
    serviceConfig.LockPersonality = true;