summary refs log tree commit diff
path: root/nixos
diff options
context:
space:
mode:
authorJoachim F <joachifm@users.noreply.github.com>2018-01-14 11:33:02 +0000
committerGitHub <noreply@github.com>2018-01-14 11:33:02 +0000
commitb6c696cc6fcacf04d3f99c632b066f7dac9114bb (patch)
treebfc0d28fe7e6d6f1080d68252072fa3c3860b482 /nixos
parentee4e6ebbfaad09a20f8b447e084444449583f505 (diff)
parentc883311327f1c842faffc437f344b46a82030b59 (diff)
downloadnixpkgs-b6c696cc6fcacf04d3f99c632b066f7dac9114bb.tar
nixpkgs-b6c696cc6fcacf04d3f99c632b066f7dac9114bb.tar.gz
nixpkgs-b6c696cc6fcacf04d3f99c632b066f7dac9114bb.tar.bz2
nixpkgs-b6c696cc6fcacf04d3f99c632b066f7dac9114bb.tar.lz
nixpkgs-b6c696cc6fcacf04d3f99c632b066f7dac9114bb.tar.xz
nixpkgs-b6c696cc6fcacf04d3f99c632b066f7dac9114bb.tar.zst
nixpkgs-b6c696cc6fcacf04d3f99c632b066f7dac9114bb.zip
Merge pull request #33444 from rnhmjoj/dnscrypt-wrapper
nixos/dnscrypt-wrapper: fix rotate script failing to restart the service
Diffstat (limited to 'nixos')
-rw-r--r--nixos/modules/services/networking/dnscrypt-wrapper.nix10
1 files changed, 10 insertions, 0 deletions
diff --git a/nixos/modules/services/networking/dnscrypt-wrapper.nix b/nixos/modules/services/networking/dnscrypt-wrapper.nix
index 23cc92946e4..bf13d5c6f5f 100644
--- a/nixos/modules/services/networking/dnscrypt-wrapper.nix
+++ b/nixos/modules/services/networking/dnscrypt-wrapper.nix
@@ -145,6 +145,16 @@ in {
     };
     users.groups.dnscrypt-wrapper = { };
 
+    security.polkit.extraConfig = ''
+      // Allow dnscrypt-wrapper user to restart dnscrypt-wrapper.service
+      polkit.addRule(function(action, subject) {
+          if (action.id == "org.freedesktop.systemd1.manage-units" &&
+              action.lookup("unit") == "dnscrypt-wrapper.service" &&
+              subject.user == "dnscrypt-wrapper") {
+              return polkit.Result.YES;
+          }
+        });
+    '';
 
     systemd.services.dnscrypt-wrapper = {
       description = "dnscrypt-wrapper daemon";