cafkafk/nixpkgs
cafkafk/nixpkgs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

nixos/home-assistant: update hardening for bluetooth components

Browse source 
A larger number of bluetooth components were introduced in 2022.8.0. To
make them work we need to add a hardening exception, so they can
discover and use bluetooth devices.
This commit is contained in:
Martin Weinelt 2022-08-04 12:23:21 +02:00
parent 15c79e4568
commit b2367dbdd1
No known key found for this signature in database
GPG key ID: 87C1E9888F856759
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
nixos/modules/services/home-automation/home-assistant.nix
View file

@ -411,12 +411,12 @@ in {
; ;
serviceConfig = let serviceConfig = let
# List of capabilities to equip home-assistant with, depending on configured components # List of capabilities to equip home-assistant with, depending on configured components
capabilities = [ capabilities = lib.unique ([
# Empty string first, so we will never accidentally have an empty capability bounding set # Empty string first, so we will never accidentally have an empty capability bounding set
# https://github.com/NixOS/nixpkgs/issues/120617#issuecomment-830685115 # https://github.com/NixOS/nixpkgs/issues/120617#issuecomment-830685115
"" ""
] ++ (unique (optionals (useComponent "bluetooth_tracker" || useComponent "bluetooth_le_tracker") [ ] ++ lib.optionals (builtins.any useComponent [ "bluetooth" "bluetooth_le_tracker" "bluetooth_tracker" "eq3btsmart" "fjaraskupan" "govee_ble" "homekit_controller" "inkbird" "moat" "sensorpush" "switchbot" "xiaomi_ble" ]) [
# Required for interaction with hci devices and bluetooth sockets # Required for interaction with hci devices and bluetooth sockets, identified by bluetooth-adapters dependency
# https://www.home-assistant.io/integrations/bluetooth_le_tracker/#rootless-setup-on-core-installs # https://www.home-assistant.io/integrations/bluetooth_le_tracker/#rootless-setup-on-core-installs
"CAP_NET_ADMIN" "CAP_NET_ADMIN"
"CAP_NET_RAW" "CAP_NET_RAW"
@ -429,7 +429,7 @@ in {
"CAP_NET_ADMIN" "CAP_NET_ADMIN"
"CAP_NET_BIND_SERVICE" "CAP_NET_BIND_SERVICE"
"CAP_NET_RAW" "CAP_NET_RAW"
])); ]);
componentsUsingBluetooth = [ componentsUsingBluetooth = [
# Components that require the AF_BLUETOOTH address family # Components that require the AF_BLUETOOTH address family
"bluetooth_tracker" "bluetooth_tracker"