Remove policykit.nix (old PolicyKit module)
Only the HAL module needed it.
This commit is contained in:
parent
1e5a2bca28
commit
6547ecb72f
@ -46,7 +46,6 @@
|
|||||||
./security/ca.nix
|
./security/ca.nix
|
||||||
./security/pam.nix
|
./security/pam.nix
|
||||||
./security/pam_usb.nix
|
./security/pam_usb.nix
|
||||||
./security/policykit.nix
|
|
||||||
./security/polkit.nix
|
./security/polkit.nix
|
||||||
./security/rtkit.nix
|
./security/rtkit.nix
|
||||||
./security/setuid-wrappers.nix
|
./security/setuid-wrappers.nix
|
||||||
|
@ -1,80 +0,0 @@
|
|||||||
{ config, pkgs, ... }:
|
|
||||||
|
|
||||||
with pkgs.lib;
|
|
||||||
|
|
||||||
let
|
|
||||||
|
|
||||||
conf = pkgs.writeText "PolicyKit.conf"
|
|
||||||
''
|
|
||||||
<?xml version="1.0" encoding="UTF-8"?>
|
|
||||||
|
|
||||||
<!DOCTYPE pkconfig PUBLIC "-//freedesktop//DTD PolicyKit Configuration 1.0//EN"
|
|
||||||
"http://hal.freedesktop.org/releases/PolicyKit/1.0/config.dtd">
|
|
||||||
|
|
||||||
<config version="0.1">
|
|
||||||
</config>
|
|
||||||
'';
|
|
||||||
|
|
||||||
in
|
|
||||||
|
|
||||||
{
|
|
||||||
|
|
||||||
options = {
|
|
||||||
|
|
||||||
security.policykit.enable = mkOption {
|
|
||||||
default = false;
|
|
||||||
description = "Enable PolicyKit (obsolete).";
|
|
||||||
};
|
|
||||||
|
|
||||||
};
|
|
||||||
|
|
||||||
|
|
||||||
config = mkIf config.security.policykit.enable {
|
|
||||||
|
|
||||||
environment.systemPackages = [ pkgs.policykit ];
|
|
||||||
|
|
||||||
services.dbus.packages = [ pkgs.policykit ];
|
|
||||||
|
|
||||||
security.pam.services = [ { name = "polkit"; } ];
|
|
||||||
|
|
||||||
users.extraUsers = singleton
|
|
||||||
{ name = "polkituser";
|
|
||||||
uid = config.ids.uids.polkituser;
|
|
||||||
description = "PolicyKit user";
|
|
||||||
};
|
|
||||||
|
|
||||||
users.extraGroups = singleton
|
|
||||||
{ name = "polkituser";
|
|
||||||
gid = config.ids.gids.polkituser;
|
|
||||||
};
|
|
||||||
|
|
||||||
environment.etc =
|
|
||||||
[ { source = conf;
|
|
||||||
target = "PolicyKit/PolicyKit.conf";
|
|
||||||
}
|
|
||||||
{ source = (pkgs.buildEnv {
|
|
||||||
name = "PolicyKit-policies";
|
|
||||||
pathsToLink = [ "/share/PolicyKit/policy" ];
|
|
||||||
paths = [ pkgs.policykit pkgs.consolekit pkgs.hal ];
|
|
||||||
}) + "/share/PolicyKit/policy";
|
|
||||||
target = "PolicyKit/policy";
|
|
||||||
}
|
|
||||||
];
|
|
||||||
|
|
||||||
system.activationScripts.policyKit = stringAfter [ "users" ]
|
|
||||||
''
|
|
||||||
mkdir -m 0770 -p /var/run/PolicyKit
|
|
||||||
chown root:polkituser /var/run/PolicyKit
|
|
||||||
|
|
||||||
mkdir -m 0770 -p /var/lib/PolicyKit
|
|
||||||
chown root:polkituser /var/lib/PolicyKit
|
|
||||||
|
|
||||||
mkdir -p /var/lib/misc
|
|
||||||
touch /var/lib/misc/PolicyKit.reload
|
|
||||||
chmod 0664 /var/lib/misc/PolicyKit.reload
|
|
||||||
chown polkituser:polkituser /var/lib/misc/PolicyKit.reload
|
|
||||||
'';
|
|
||||||
|
|
||||||
};
|
|
||||||
|
|
||||||
}
|
|
Loading…
x
Reference in New Issue
Block a user