Grimmauld/grimm-nixos-laptop
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

refine timesyncd rule

Browse Source
This commit is contained in:
Grimmauld 2024-10-06 10:47:08 +02:00
parent 8749f5c254
commit 3a29e3975e
Signed by: Grimmauld
GPG Key ID: C2946668769F91FB
1 changed files with 13 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
common/tooling/opensnitch/default.nix
View File

@ -284,14 +284,25 @@ in
operand = "list"; operand = "list";
list = [ list = [
{ {
type ="simple"; type = "simple";
sensitive = false; sensitive = false;
operand = "process.path"; operand = "process.path";
data = "${lib.getBin pkgs.systemd}/lib/systemd/systemd-timesyncd"; } data = "${lib.getBin pkgs.systemd}/lib/systemd/systemd-timesyncd"; }
{ {
type ="regexp"; type ="regexp";
operand = "dest.port"; operand = "dest.port";
data = "123|37"; data = "123|37|53";
}
{
type = "regexp";
sensitive = false;
operand = "dest.host";
data = ".*\.nixos\.pool\.ntp\.org";
}
{
type = "simple";
operand = "user.id";
data = "154";
} }
]; ];
}; };