From fc8011ad8d23411bcb950b03c80bd5ceb56c068c Mon Sep 17 00:00:00 2001 From: Eelco Dolstra Date: Wed, 13 May 2015 16:22:53 +0200 Subject: [PATCH] Ensure that nscd, sshd are created as system users c0f70b4694bb2be1c25ef0e23e3f11f9d718d162 removed the fixed uid assignment, but then it becomes necessary to set isSystemUser. http://hydra.nixos.org/build/22182588 --- nixos/modules/services/networking/ssh/sshd.nix | 4 ++-- nixos/modules/services/system/nscd.nix | 5 ++++- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/nixos/modules/services/networking/ssh/sshd.nix b/nixos/modules/services/networking/ssh/sshd.nix index c25532511a07..6cc86b4e4b5a 100644 --- a/nixos/modules/services/networking/ssh/sshd.nix +++ b/nixos/modules/services/networking/ssh/sshd.nix @@ -282,8 +282,8 @@ in config = mkIf cfg.enable { users.extraUsers.sshd = - { description = "SSH privilege separation user"; - home = "/var/empty"; + { isSystemUser = true; + description = "SSH privilege separation user"; }; environment.etc = authKeysFiles ++ [ diff --git a/nixos/modules/services/system/nscd.nix b/nixos/modules/services/system/nscd.nix index caedc2e42173..3c0d2043ed5d 100644 --- a/nixos/modules/services/system/nscd.nix +++ b/nixos/modules/services/system/nscd.nix @@ -42,7 +42,10 @@ in config = mkIf cfg.enable { - users.extraUsers.nscd.description = "Name service cache daemon user"; + users.extraUsers.nscd = + { isSystemUser = true; + description = "Name service cache daemon user"; + }; systemd.services.nscd = { description = "Name Service Cache Daemon";