dev/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

Merge pull request #267319 from ju1m/transmission

Browse Source 
nixos/transmission: fixes #258793
This commit is contained in:
Doron Behar 2023-12-22 12:35:56 +00:00 committed by GitHub
commit 0ae28209f1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
nixos/modules/services/torrent/transmission.nix
View File

@ -314,6 +314,9 @@ in
BindPaths =
[ "${cfg.home}/${settingsDir}"
cfg.settings.download-dir
# Transmission may need to read in the host's /run (eg. /run/systemd/resolve)
# or write in its private /run (eg. /run/host).
"/run"
] ++
optional cfg.settings.incomplete-dir-enabled
cfg.settings.incomplete-dir ++
@ -324,7 +327,6 @@ in
# an AppArmor profile is provided to get a confinement based upon paths and rights.
builtins.storeDir
"/etc"
"/run"
] ++
optional (cfg.settings.script-torrent-done-enabled &&
cfg.settings.script-torrent-done-filename != null)
@ -349,10 +351,10 @@ in
MemoryDenyWriteExecute = true;
NoNewPrivileges = true;
PrivateDevices = true;
PrivateMounts = true;
PrivateMounts = mkDefault true;
PrivateNetwork = mkDefault false;
PrivateTmp = true;
PrivateUsers = true;
PrivateUsers = mkDefault true;
ProtectClock = true;
ProtectControlGroups = true;
# ProtectHome=true would not allow BindPaths= to work across /home,