public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #5665 from joachifm/dnscrypt-proxy-apparmor-updates

Browse Source 
dnscrypt-proxy service: update AppArmor profile
This commit is contained in:
James Cook 2015-02-14 22:02:31 -08:00
commit 33550b6efe
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
nixos/modules/services/networking/dnscrypt-proxy.nix
View File

@ -88,7 +88,12 @@ in
security.apparmor.profiles = mkIf apparmorEnabled [ security.apparmor.profiles = mkIf apparmorEnabled [
(pkgs.writeText "apparmor-dnscrypt-proxy" '' (pkgs.writeText "apparmor-dnscrypt-proxy" ''
${dnscrypt-proxy}/sbin/dnscrypt-proxy { ${dnscrypt-proxy}/bin/dnscrypt-proxy {
network inet stream,
network inet6 stream,
network inet dgram,
network inet6 dgram,
capability ipc_lock, capability ipc_lock,
capability net_bind_service, capability net_bind_service,
capability net_admin, capability net_admin,
@ -126,7 +131,7 @@ in
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];
serviceConfig = { serviceConfig = {
Type = "forking"; Type = "forking";
ExecStart = "${dnscrypt-proxy}/sbin/dnscrypt-proxy ${toString daemonArgs}"; ExecStart = "${dnscrypt-proxy}/bin/dnscrypt-proxy ${toString daemonArgs}";
}; };
}; };