nixpkgs/nixos/modules
SLNOS 2de3c4bd78 nixos/tor: add tor-init service to fix directory ownerships, fix hardenings
This reverts a part of 5bd12c694b.

Apparently there's no way to specify user for RuntimeDirectory in systemd
service file (it's always root) but tor won't create control socket if the dir
is owned by anybody except the tor user.

These hardenings were adopted from the upstream service file, checked
against systemd.service(5) and systemd.exec(5) manuals, and tested to
actually work with all the options enabled.

`PrivateDevices` implies `DevicePolicy=closed` according to systemd.exec(5),
removed.

`--RunAsDaemon 0` is the default value according to tor(5), removed.
2018-06-11 15:52:24 +00:00
..
config iproute2: module to create rt_table file & co 2018-05-15 21:55:04 +09:00
hardware
i18n/input-method
installer Merge branch 'plat-fix-for-merge-2' into master 2018-06-01 20:08:08 +03:00
misc Revert "nixpkgs module: Fix defaulting of localSystem and system" 2018-05-31 15:55:36 -04:00
profiles nixos/installer: Drop dmraid 2018-05-25 01:55:51 +03:00
programs nixos/autosuggestions: add module (#41397) 2018-06-10 23:08:50 +02:00
security manual: Clarify that limits.conf doesn't apply to systemd services. (#40267) 2018-05-12 17:44:57 +02:00
services nixos/tor: add tor-init service to fix directory ownerships, fix hardenings 2018-06-11 15:52:24 +00:00
system nixos/initrd-network: support hetzner 2018-06-11 10:35:02 +00:00
tasks zfs: Fix "zfs-sync" for modern systemd 2018-06-09 01:17:04 +01:00
testing nixos/tests: set default stateVersion in test VMs 2018-05-14 00:01:15 +02:00
virtualisation Merge pull request #41311 from AmineChikhaoui/fix-gce-fetch-ssh 2018-06-04 11:38:07 +02:00
module-list.nix nixos/autosuggestions: add module (#41397) 2018-06-10 23:08:50 +02:00
rename.nix nixos/autosuggestions: add module (#41397) 2018-06-10 23:08:50 +02:00