diff options
| author | Eelco Dolstra <eelco.dolstra@logicblox.com> | 2016-01-18 13:57:27 +0100 |
|---|---|---|
| committer | Eelco Dolstra <eelco.dolstra@logicblox.com> | 2016-01-26 16:25:40 +0100 |
| commit | 2352e2589ea0de775ffb6b68e66964c694953ea9 (patch) | |
| tree | c2099c6bc1b6dc0cbef69fa2c5aa12bd671d9f5b /nixos/modules/security/audit.nix | |
| parent | 981e8d55824717960809179a47bfeb81c8c1ee70 (diff) | |
| download | nixlib-2352e2589ea0de775ffb6b68e66964c694953ea9.tar nixlib-2352e2589ea0de775ffb6b68e66964c694953ea9.tar.gz nixlib-2352e2589ea0de775ffb6b68e66964c694953ea9.tar.bz2 nixlib-2352e2589ea0de775ffb6b68e66964c694953ea9.tar.lz nixlib-2352e2589ea0de775ffb6b68e66964c694953ea9.tar.xz nixlib-2352e2589ea0de775ffb6b68e66964c694953ea9.tar.zst nixlib-2352e2589ea0de775ffb6b68e66964c694953ea9.zip | |
audit: Disable in containers
This barfs: Jan 18 12:46:32 machine 522i0x9l80z7gw56iahxjjsdjp0xi10q-audit-start[506]: The audit system is disabled
Diffstat (limited to 'nixos/modules/security/audit.nix')
| -rw-r--r-- | nixos/modules/security/audit.nix | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/nixos/modules/security/audit.nix b/nixos/modules/security/audit.nix index 3aa31e079073..f223f52ec487 100644 --- a/nixos/modules/security/audit.nix +++ b/nixos/modules/security/audit.nix @@ -93,9 +93,11 @@ in { config = mkIf (cfg.enable == "lock" || cfg.enable) { systemd.services.audit = { - description = "pseudo-service representing the kernel audit state"; + description = "Kernel Auditing"; wantedBy = [ "basic.target" ]; + unitConfig.ConditionVirtualization = "!container"; + path = [ pkgs.audit ]; serviceConfig = { |