Grimmauld/grimm-nixos-laptop
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix race condition (i hope)

Browse Source
This commit is contained in:
Grimmauld 2024-10-25 18:13:30 +02:00
parent b2f706bf83
commit ec80dc24fb
Signed by: Grimmauld
GPG Key ID: C2946668769F91FB
1 changed files with 13 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
common/tooling/apparmor/aa-alias-module.nix
View File

@ -1,17 +1,25 @@
{ config, lib, pkgs, ... }: let
{
config,
lib,
pkgs,
...
}:
let
inherit (lib) getExe;
aa-alias-manager = pkgs.callPackage ./aa-alias-manager-package.nix {};
aa-alias-manager = pkgs.callPackage ./aa-alias-manager-package.nix { };
alias_dir = "/run/aliases.d";
in {
in
{
config = {
security.apparmor.includes."tunables/alias.d/store" = ''
include if exists "${alias_dir}"
'';
systemd.services.aa-alias-setup = {
wantedBy = [ "apparmor.service" ];
before = [ "apparmor.service" ];
requiredBy = [ "apparmor.service" ];
path = [ config.nix.package ]; # respect the users choice to use alternative nix implementations
serviceConfig = {
Type = "oneshot";
ExecStart = "${getExe aa-alias-manager} -o ${alias_dir} -p ${./aa-alias-patterns.json}";