public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Limit the location where fail2ban service can write to (only /var/run/fail2ban).

Browse Source
This commit is contained in:
Rob Vermaas 2013-07-25 15:48:00 +02:00
parent c5f6a08750
commit 7e7392b8ad
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
modules/services/security/fail2ban.nix
View File

@ -114,7 +114,11 @@ in
mkdir -p /var/run/fail2ban -m 0755 mkdir -p /var/run/fail2ban -m 0755
''; '';
serviceConfig.ExecStart = "${pkgs.fail2ban}/bin/fail2ban-server -f"; serviceConfig =
{ ExecStart = "${pkgs.fail2ban}/bin/fail2ban-server -f";
ReadOnlyDirectories = "/";
ReadWriteDirectories = "/var/run/fail2ban";
};
postStart = postStart =
'' ''