diff options
| author | James Cook <jcook@cs.berkeley.edu> | 2015-02-14 22:02:31 -0800 |
|---|---|---|
| committer | James Cook <jcook@cs.berkeley.edu> | 2015-02-14 22:02:31 -0800 |
| commit | 33550b6efe59164af6171bf90aade03d84ee6caf (patch) | |
| tree | d67374fd6c281e324b3ce115b15ca6bff1a756c9 /nixos/modules/services/networking/dnscrypt-proxy.nix | |
| parent | f114979de73e93288318055e3974e37c5ee05506 (diff) | |
| parent | 97bac259d0deae93934357dc7c4bf7628cae88f8 (diff) | |
| download | nixpkgs-33550b6efe59164af6171bf90aade03d84ee6caf.tar nixpkgs-33550b6efe59164af6171bf90aade03d84ee6caf.tar.gz nixpkgs-33550b6efe59164af6171bf90aade03d84ee6caf.tar.bz2 nixpkgs-33550b6efe59164af6171bf90aade03d84ee6caf.tar.lz nixpkgs-33550b6efe59164af6171bf90aade03d84ee6caf.tar.xz nixpkgs-33550b6efe59164af6171bf90aade03d84ee6caf.tar.zst nixpkgs-33550b6efe59164af6171bf90aade03d84ee6caf.zip | |
Merge pull request #5665 from joachifm/dnscrypt-proxy-apparmor-updates
dnscrypt-proxy service: update AppArmor profile
Diffstat (limited to 'nixos/modules/services/networking/dnscrypt-proxy.nix')
| -rw-r--r-- | nixos/modules/services/networking/dnscrypt-proxy.nix | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/nixos/modules/services/networking/dnscrypt-proxy.nix b/nixos/modules/services/networking/dnscrypt-proxy.nix index d1b5fbedfa6..5cc33f35adb 100644 --- a/nixos/modules/services/networking/dnscrypt-proxy.nix +++ b/nixos/modules/services/networking/dnscrypt-proxy.nix @@ -88,7 +88,12 @@ in security.apparmor.profiles = mkIf apparmorEnabled [ (pkgs.writeText "apparmor-dnscrypt-proxy" '' - ${dnscrypt-proxy}/sbin/dnscrypt-proxy { + ${dnscrypt-proxy}/bin/dnscrypt-proxy { + network inet stream, + network inet6 stream, + network inet dgram, + network inet6 dgram, + capability ipc_lock, capability net_bind_service, capability net_admin, @@ -126,7 +131,7 @@ in wantedBy = [ "multi-user.target" ]; serviceConfig = { Type = "forking"; - ExecStart = "${dnscrypt-proxy}/sbin/dnscrypt-proxy ${toString daemonArgs}"; + ExecStart = "${dnscrypt-proxy}/bin/dnscrypt-proxy ${toString daemonArgs}"; }; }; |