From 1bdda029cd85b5f4358697afd2c8f6a1996c6ccf Mon Sep 17 00:00:00 2001 From: Simon Thoby Date: Wed, 5 May 2021 22:47:46 +0200 Subject: [PATCH] nixos/services/torrent/transmission.nix: add a missing apparmor rule libbrotli wasn't listed as a dependency for the AppArmor profile of the transmission-daemon binary. As a result, transmission wouldn't run and would fail, logging this audit message to dmesg: audit[11595]: AVC apparmor=DENIED operation=open profile=/nix/store/08i1rmakmnpwyxpvp0sfc5hcm106am7w-transmission-3.00/bin/transmission-daemon name=/proc/11595/environ pid=11595 comm=transmission-da requested_mask=r denied_mask=r fsuid=70 ouid=70 --- nixos/modules/services/torrent/transmission.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/nixos/modules/services/torrent/transmission.nix b/nixos/modules/services/torrent/transmission.nix index 7bec073e26f..1dec111b829 100644 --- a/nixos/modules/services/torrent/transmission.nix +++ b/nixos/modules/services/torrent/transmission.nix @@ -402,6 +402,7 @@ in mr ${getLib pkgs.util-linuxMinimal.out}/lib/libuuid.so*, mr ${getLib pkgs.xz}/lib/liblzma*.so*, mr ${getLib pkgs.zlib}/lib/libz*.so*, + mr ${getLib pkgs.brotli}/lib/libbrotli*.so*, r @{PROC}/sys/kernel/random/uuid, r @{PROC}/sys/vm/overcommit_memory,