colin/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

haveged module: clean up service configuration (#18513)

Browse Source 
Switches from the forking service type to simple by running haveged in
the foreground. Also restricts the execution environment a bit (these
are inspired by the Debian service file).
This commit is contained in:
Robert Helgesson 2016-09-13 07:07:46 +02:00 committed by Franz Pletz
parent 87ee2736ce
commit b023e8f303
1 changed files with 11 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
nixos/modules/services/security/haveged.nix
View File

@ -48,14 +48,18 @@ in
{ description = "Entropy Harvesting Daemon"; { description = "Entropy Harvesting Daemon";
unitConfig.Documentation = "man:haveged(8)"; unitConfig.Documentation = "man:haveged(8)";
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];
path = [ pkgs.haveged ]; path = [ pkgs.haveged ];
serviceConfig = serviceConfig = {
{ Type = "forking"; ExecStart = "${pkgs.haveged}/bin/haveged -F -w ${toString cfg.refill_threshold} -v 1";
ExecStart = "${pkgs.haveged}/sbin/haveged -w ${toString cfg.refill_threshold} -v 1"; SuccessExitStatus = 143;
PIDFile = "/run/haveged.pid"; PrivateTmp = true;
}; PrivateDevices = true;
PrivateNetwork = true;
ProtectSystem = "full";
ProtectHome = true;
};
}; };
}; };