movefasta/nixpkgs
0
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-07-13 21:50:33 +03:00
Code Activity

nixos/nullmailer: allow users in the nullmailer group to send mails

Browse source 
In combination with https://github.com/NixOS/nixpkgs/pull/231673 this
allows hardened services to use nullmailer's sendmail.
This commit is contained in:
Sandro Jäckel 2023-07-13 17:02:19 +02:00
parent 8e284221f4
commit b2c1b176d9
No known key found for this signature in database
GPG key ID: 3AF5A43A3EECC2E5
1 changed files with 6 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

12
nixos/modules/services/mail/nullmailer.nix
View file

@ -203,7 +203,7 @@ with lib;
users = { users = {
users.${cfg.user} = { users.${cfg.user} = {
description = "Nullmailer relay-only mta user"; description = "Nullmailer relay-only mta user";
group = cfg.group; inherit (cfg) group;
isSystemUser = true; isSystemUser = true;
}; };
@ -211,10 +211,10 @@ with lib;
}; };
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d /var/spool/nullmailer - ${cfg.user} - - -" "d /var/spool/nullmailer - ${cfg.user} ${cfg.group} - -"
"d /var/spool/nullmailer/failed 750 ${cfg.user} - - -" "d /var/spool/nullmailer/failed 770 ${cfg.user} ${cfg.group} - -"
"d /var/spool/nullmailer/queue 750 ${cfg.user} - - -" "d /var/spool/nullmailer/queue 770 ${cfg.user} ${cfg.group} - -"
"d /var/spool/nullmailer/tmp 750 ${cfg.user} - - -" "d /var/spool/nullmailer/tmp 770 ${cfg.user} ${cfg.group} - -"
]; ];
systemd.services.nullmailer = { systemd.services.nullmailer = {
@ -238,7 +238,7 @@ with lib;
program = "sendmail"; program = "sendmail";
source = "${pkgs.nullmailer}/bin/sendmail"; source = "${pkgs.nullmailer}/bin/sendmail";
owner = cfg.user; owner = cfg.user;
group = cfg.group; inherit (cfg) group;
setuid = true; setuid = true;
setgid = true; setgid = true;
}; };