nixos/ddclient: make RuntimeDirectory private

ddclient will raise a warning if /run/ddclient/ is world-readable
This commit is contained in:
Renaud 2018-10-22 23:58:12 +02:00 committed by GitHub
parent 9a7bca27cc
commit f76a9eb526
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -182,6 +182,7 @@ with lib;
serviceConfig = rec {
DynamicUser = true;
RuntimeDirectory = StateDirectory;
RuntimeDirectoryMode = "0750";
StateDirectory = builtins.baseNameOf dataDir;
Type = "oneshot";
ExecStartPre = "!${lib.getBin pkgs.coreutils}/bin/install -m666 ${cfg.configFile} /run/${RuntimeDirectory}/ddclient.conf";