diff options
| author | SLNOS <anonymous@wired> | 2018-05-01 00:00:00 +0000 |
|---|---|---|
| committer | Jan Malakhovski <oxij@oxij.org> | 2018-06-11 15:52:24 +0000 |
| commit | 2de3c4bd7840af8bf6a37e06a1124e10db40ac20 (patch) | |
| tree | 1290b5b75ce0acb962089dbd46e7e64e7bc21879 /pkgs/development/python-modules/python-sql/default.nix | |
| parent | a1f226b78b5e6ed383aa584d71044fd5cf53753b (diff) | |
nixos/tor: add tor-init service to fix directory ownerships, fix hardenings
This reverts a part of 5bd12c694bfebaef1d03eb7f74a6eca01b86f546.
Apparently there's no way to specify user for RuntimeDirectory in systemd
service file (it's always root) but tor won't create control socket if the dir
is owned by anybody except the tor user.
These hardenings were adopted from the upstream service file, checked
against systemd.service(5) and systemd.exec(5) manuals, and tested to
actually work with all the options enabled.
`PrivateDevices` implies `DevicePolicy=closed` according to systemd.exec(5),
removed.
`--RunAsDaemon 0` is the default value according to tor(5), removed.
Diffstat (limited to 'pkgs/development/python-modules/python-sql/default.nix')
0 files changed, 0 insertions, 0 deletions