haskal
/
dragnpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ghidra-server: fixup /var/lib/ghidra-server perms

This commit is contained in:
xenia 2024-04-09 16:12:49 -04:00
parent d0ef41e796
commit 636d3d98a6
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
modules/ghidra-server/default.nix
View File

@ -40,7 +40,6 @@ let cfg = config.services.ghidra-server; in {
isSystemUser = true; isSystemUser = true;
home = cfg.directory; home = cfg.directory;
group = cfg.group; group = cfg.group;
createHome = true;
packages = [ cfg.package cfg.jdkPackage ]; packages = [ cfg.package cfg.jdkPackage ];
}; };
@ -69,6 +68,13 @@ let cfg = config.services.ghidra-server; in {
Group = cfg.group; Group = cfg.group;
SuccessExitStatus = 143; SuccessExitStatus = 143;
# use StateDirectory to create home dir and additional needed dirs with overridden
# permissions when the unit starts
# this is needed because we'd like the group (ghidra) to have write access to the
# directories here, particularly ~admin
StateDirectory = "${cfg.directory} ${cfg.directory}/repositories ${cfg.directory}/repositories/~admin";
StateDirectoryMode = "0770";
PrivateTmp = true; PrivateTmp = true;
NoNewPrivileges = true; NoNewPrivileges = true;
}; };