summary refs log tree commit diff
path: root/nixos/modules/system/boot/systemd.nix
diff options
context:
space:
mode:
authorFlorian Klink <flokli@flokli.de>2021-07-29 14:55:57 +0200
committerFlorian Klink <flokli@flokli.de>2021-07-29 15:00:24 +0200
commit72934892883ee5a37643f8ea02838fdd61fe4153 (patch)
tree12cfa3813ffcdbfdae872372f89ca1c81bcaf8d2 /nixos/modules/system/boot/systemd.nix
parent9b52ff96cd715feda749c3fa6bd93f19c131624f (diff)
downloadnixpkgs-72934892883ee5a37643f8ea02838fdd61fe4153.tar
nixpkgs-72934892883ee5a37643f8ea02838fdd61fe4153.tar.gz
nixpkgs-72934892883ee5a37643f8ea02838fdd61fe4153.tar.bz2
nixpkgs-72934892883ee5a37643f8ea02838fdd61fe4153.tar.lz
nixpkgs-72934892883ee5a37643f8ea02838fdd61fe4153.tar.xz
nixpkgs-72934892883ee5a37643f8ea02838fdd61fe4153.tar.zst
nixpkgs-72934892883ee5a37643f8ea02838fdd61fe4153.zip
nixos/systemd: provision a systemd-coredump user
systemd-coredump tries to drop privileges to a systemd-coredump user if
present (and falls back to the root user if it's not available).

Create that user, and recycle uid 151 for it. We don't really care about
the gid.

Fixes https://github.com/NixOS/nixpkgs/issues/120803.
Diffstat (limited to 'nixos/modules/system/boot/systemd.nix')
-rw-r--r--nixos/modules/system/boot/systemd.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/nixos/modules/system/boot/systemd.nix b/nixos/modules/system/boot/systemd.nix
index 58064e5de86..b8dab27a393 100644
--- a/nixos/modules/system/boot/systemd.nix
+++ b/nixos/modules/system/boot/systemd.nix
@@ -1053,6 +1053,7 @@ in
 
     services.dbus.enable = true;
 
+    users.users.systemd-coredump.uid = config.ids.uids.systemd-coredump;
     users.users.systemd-network.uid = config.ids.uids.systemd-network;
     users.groups.systemd-network.gid = config.ids.gids.systemd-network;
     users.users.systemd-resolve.uid = config.ids.uids.systemd-resolve;