diff options
author | Joachim F <joachifm@users.noreply.github.com> | 2018-01-14 11:33:02 +0000 |
---|---|---|
committer | GitHub <noreply@github.com> | 2018-01-14 11:33:02 +0000 |
commit | b6c696cc6fcacf04d3f99c632b066f7dac9114bb (patch) | |
tree | bfc0d28fe7e6d6f1080d68252072fa3c3860b482 /nixos | |
parent | ee4e6ebbfaad09a20f8b447e084444449583f505 (diff) | |
parent | c883311327f1c842faffc437f344b46a82030b59 (diff) |
Merge pull request #33444 from rnhmjoj/dnscrypt-wrapper
nixos/dnscrypt-wrapper: fix rotate script failing to restart the service
Diffstat (limited to 'nixos')
-rw-r--r-- | nixos/modules/services/networking/dnscrypt-wrapper.nix | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/nixos/modules/services/networking/dnscrypt-wrapper.nix b/nixos/modules/services/networking/dnscrypt-wrapper.nix index 23cc92946e41f..bf13d5c6f5fec 100644 --- a/nixos/modules/services/networking/dnscrypt-wrapper.nix +++ b/nixos/modules/services/networking/dnscrypt-wrapper.nix @@ -145,6 +145,16 @@ in { }; users.groups.dnscrypt-wrapper = { }; + security.polkit.extraConfig = '' + // Allow dnscrypt-wrapper user to restart dnscrypt-wrapper.service + polkit.addRule(function(action, subject) { + if (action.id == "org.freedesktop.systemd1.manage-units" && + action.lookup("unit") == "dnscrypt-wrapper.service" && + subject.user == "dnscrypt-wrapper") { + return polkit.Result.YES; + } + }); + ''; systemd.services.dnscrypt-wrapper = { description = "dnscrypt-wrapper daemon"; |