diff options
| author | Martin Weinelt <hexa@darmstadt.ccc.de> | 2021-05-22 00:47:54 +0200 |
|---|---|---|
| committer | Martin Weinelt <hexa@darmstadt.ccc.de> | 2021-05-22 20:30:49 +0200 |
| commit | 79e675444caf7b491b2c0d25277b046d3f6d8e04 (patch) | |
| tree | 0c67a4718c4820b28393a97087d4508250df0569 /pkgs/development/python-modules/python-mapnik/python-mapnik_std_optional.patch | |
| parent | a420acab1e197c0c4a2f2b960f3bf1e6b8043caa (diff) | |
nixos/matrix-synapse: protect created files
Enforce UMask on the systemd unit to restrict the permissions of files
created. Especially the homeserver signing key should not be world
readable, and media is served through synapse itself, so no other user
needs access to these files.
Use a prestart chmod to fixup the permissions on the signing key.
Diffstat (limited to 'pkgs/development/python-modules/python-mapnik/python-mapnik_std_optional.patch')
0 files changed, 0 insertions, 0 deletions