colin/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
2de3c4bd78
nixpkgs/nixos/modules/services
History
SLNOS 2de3c4bd78 nixos/tor: add tor-init service to fix directory ownerships, fix hardenings 
This reverts a part of 5bd12c694b.

Apparently there's no way to specify user for RuntimeDirectory in systemd
service file (it's always root) but tor won't create control socket if the dir
is owned by anybody except the tor user.

These hardenings were adopted from the upstream service file, checked
against systemd.service(5) and systemd.exec(5) manuals, and tested to
actually work with all the options enabled.

`PrivateDevices` implies `DevicePolicy=closed` according to systemd.exec(5),
removed.

`--RunAsDaemon 0` is the default value according to tor(5), removed.
2018-06-11 15:52:24 +00:00
..
admin nixos/oxidized: add module 2018-05-24 04:40:45 +02:00
amqp nixos/rabbitmq: fix restarts and sasl logs 2017-09-23 17:58:43 -04:00
audio mpd: fix spelling in description 2018-06-03 09:55:26 +02:00
backup nixos/duplicati: add port and interface options 2018-06-09 00:34:13 +02:00
cluster/kubernetes kubernetes: corrected spelling mistake in docs (#41439) 2018-06-04 05:45:25 +00:00
computing nixos/slurm: remove propagatedBuidInputs from slurmWrapped 2018-06-02 14:01:24 +02:00
continuous-integration nixos/buildkite-agent: fix variable expansion in hook scripts 2018-04-27 12:17:40 +01:00
databases nixos mysql: make start-up more robust (#41010) 2018-05-24 16:42:16 +02:00
desktops nixos/flatpak: add flatpak's XDG_DATA_DIRS to the environment 2018-05-22 02:26:21 +02:00
development hoogle service: fixups 2016-04-22 03:58:08 +02:00
editors Merge pull request #39478 from pngwjpgh/infinoted 2018-05-01 10:22:25 -05:00
games ghostOne: remove 2017-12-29 02:18:35 +01:00
hardware Merge pull request #39137 from peterhoeg/m/lcd 2018-04-28 22:57:59 +00:00
logging graylog: use jre_headless 2018-03-22 02:29:27 +01:00
mail nixos/exim: Add unit restart trigger (#41418) 2018-06-03 21:22:55 +02:00
misc nixos/sandbox: improve documentation. 2018-06-07 21:43:52 +01:00
monitoring Merge pull request #40028 from WilliButz/add-dnsmasq-exporter 2018-06-01 23:18:49 -04:00
network-filesystems Merge pull request #40879 from seppeljordan/pr-ipfs-port-scanning 2018-05-24 10:53:49 +02:00
networking nixos/nat: optional networking.nat.externalInterface (#41758) 2018-06-10 18:29:32 +02:00
printing nixos/cupsd: Introduce services.printing.logLevel option 2018-04-27 16:41:49 +00:00
scheduling nixos/modules/services/scheduling/fcron: add setuid to fcrontab 2018-05-06 11:24:09 -07:00
search elasticsearch6: fix startup due to missing jvm.options 2018-04-18 00:38:48 +02:00
security nixos/tor: add tor-init service to fix directory ownerships, fix hardenings 2018-06-11 15:52:24 +00:00
system Add localtime package and nixos module 2017-12-03 11:42:51 +01:00
torrent Merge pull request #33679 from flokli/deluge-module 2018-04-25 14:54:34 -05:00
ttys nixos: rename config.system.nixos* -> config.system.nixos.* 2018-02-18 12:56:30 +00:00
web-apps crowd: 3.0.1 -> 3.1.2 2018-05-24 04:40:47 +02:00
web-servers nixos/tomcat: fix eval error introduced by #40657 2018-06-11 11:02:54 +02:00
x11 Merge pull request #40579 from peterhoeg/m/sddm 2018-05-30 16:23:07 +08:00