nixos: permit dnscrypt-proxy service to read basic user/group info

If nscd is not running, dnscrypt-proxy crashes without read access to /etc/{password,group,nsswitch.conf}.
2015-02-23 18:02:12 +01:00 · 2015-02-23 18:02:12 +01:00 · dfe20de782
commit dfe20de782
parent e1af50c4c4
1 changed files with 4 additions and 0 deletions
--- a/nixos/modules/services/networking/dnscrypt-proxy.nix
+++ b/nixos/modules/services/networking/dnscrypt-proxy.nix
@ -104,6 +104,10 @@ in
          /dev/null rw,
          /dev/urandom r,

+          /etc/passwd r,
+          /etc/group r,
+          ${config.environment.etc."nsswitch.conf".source} r,
+
          ${pkgs.glibc}/lib/*.so mr,
          ${pkgs.tzdata}/share/zoneinfo/** r,