nixpkgs/nixos/modules/services
Silvan Mosberger 5e974362be
nixos/couchdb: Prevent it from chowning /var/log to couchdb:couchdb
The default for logFile is /var/log/couchdb.log, and the tmpfile rules chown
${dirOf cfg.logFile}, which is just /var/log, to couchdb:couchdb.

This was found by Edes' report on IRC, which looked like

    Detected unsafe path transition /var/log → /var/log/journal during canonicalization of /var/log/journal

While this bug has been present since the initial couchdb module in
62438c09f7 by @garbas, this wasn't a
problem, because the initial module only created and chowned /var/log
if it didn't exist yet, which can't occur because this gets created in
the initial phases of NixOS startup.

However with the recent move from manual preStart chown scripts to
systemd.tmpfiles.rules in 062efe018d (#59389),
this chown is suddenly running unconditionally at every system
activation, therefore triggering the above error.
2019-07-24 20:52:53 +02:00
..
admin
amqp
audio nixos/spotifyd: init 2019-07-21 00:58:20 +02:00
backup nixos/backup/tsm: init module 2019-07-15 09:41:37 +02:00
cluster treewide: remove unused variables (#63177) 2019-06-16 19:59:05 +00:00
computing
continuous-integration
databases nixos/couchdb: Prevent it from chowning /var/log to couchdb:couchdb 2019-07-24 20:52:53 +02:00
desktops nixos/doc: fix build 2019-07-18 20:40:24 -04:00
development
editors manual: mention jmacs as emacs imitation 2019-07-13 11:01:17 +02:00
games
hardware treewide: use dontConfigure 2019-07-01 04:23:51 -04:00
logging Merge pull request #64463 from Ma27/graylog-test 2019-07-21 20:53:39 +00:00
mail nixos: add 'localRecipients' config option for Postfix 2019-07-15 17:36:20 +02:00
misc Shorten mkEnableOption description 2019-07-23 12:19:28 +09:00
monitoring Merge pull request #65102 from d-goldin/patch-1 2019-07-23 10:06:20 +02:00
network-filesystems nixos/doc: Fix spurious indentation 2019-06-17 12:28:26 +02:00
networking Merge pull request #65078 from peterhoeg/f/st 2019-07-24 13:22:08 +08:00
printing
scheduling
search
security nixos/tor: fix obfs4 package 2019-07-19 04:11:17 +08:00
system nixos/nscd: document why it is configured this way 2019-07-12 12:07:45 -07:00
torrent nixos/deluge: Add extractor dependencies. 2019-07-02 22:26:38 +01:00
ttys
web-apps nixos/nextcloud: write config to additional config file 2019-07-22 18:29:52 +02:00
web-servers nixos/httpd: drop postgresql reference 2019-07-20 18:36:24 -04:00
x11 Merge pull request #65090 from eadwu/compton/7 2019-07-24 06:41:09 -05:00