suzanne.soy/nixpkgs
1
0
Fork 0
Code Issues Pull Requests2 Actions Packages Projects Releases Wiki Activity

Remove fixed uids for nscd, sshd

Browse Source 
These services don't create files on disk, let alone on a network
filesystem, so they don't really need a fixed uid. And this also gets
rid of a warning coming from <= 14.12 systems.
This commit is contained in:
Eelco Dolstra 2015-04-19 21:15:33 +02:00
parent c87977e97d
commit c0f70b4694
3 changed files with 3 additions and 13 deletions
nixos/modules
misc
ids.nix
services
networking/ssh
sshd.nix
system
nscd.nix

4
nixos/modules/misc/ids.nix
View File

@ -203,11 +203,9 @@
sddm = 175; sddm = 175;
tss = 176; tss = 176;
memcached = 177; memcached = 177;
nscd = 178;
ntp = 179; ntp = 179;
zabbix = 180; zabbix = 180;
redis = 181; redis = 181;
sshd = 182;
unifi = 183; unifi = 183;
uptimed = 184; uptimed = 184;
zope2 = 185; zope2 = 185;
@ -399,11 +397,9 @@
sddm = 175; sddm = 175;
tss = 176; tss = 176;
#memcached = 177; # unused #memcached = 177; # unused
#nscd = 178; # unused
#ntp = 179; # unused #ntp = 179; # unused
#zabbix = 180; # unused #zabbix = 180; # unused
#redis = 181; # unused #redis = 181; # unused
#sshd = 182; # unused
#unifi = 183; # unused #unifi = 183; # unused
#uptimed = 184; # unused #uptimed = 184; # unused
#zope2 = 185; # unused #zope2 = 185; # unused

6
nixos/modules/services/networking/ssh/sshd.nix
View File

@ -281,10 +281,8 @@ in
config = mkIf cfg.enable { config = mkIf cfg.enable {
users.extraUsers = singleton users.extraUsers.sshd =
{ name = "sshd"; { description = "SSH privilege separation user";
uid = config.ids.uids.sshd;
description = "SSH privilege separation user";
home = "/var/empty"; home = "/var/empty";
}; };

6
nixos/modules/services/system/nscd.nix
View File

@ -42,11 +42,7 @@ in
config = mkIf cfg.enable { config = mkIf cfg.enable {
users.extraUsers = singleton users.extraUsers.nscd.description = "Name service cache daemon user";
{ name = "nscd";
uid = config.ids.uids.nscd;
description = "Name service cache daemon user";
};
systemd.services.nscd = systemd.services.nscd =
{ description = "Name Service Cache Daemon"; { description = "Name Service Cache Daemon";