diff options
| author | Uli Baum <xeji@cat3.de> | 2018-05-20 02:24:12 +0200 |
|---|---|---|
| committer | Uli Baum <xeji@cat3.de> | 2018-05-20 02:25:42 +0200 |
| commit | 8dbd8f4d69fc8ed993f6e7798616df4c4dd96765 (patch) | |
| tree | 30598f7762e4252f0fabadf5b7cc347db2cb6e73 /nixos/modules/services/networking | |
| parent | 8bcec815bdecdb7a6094ec538860c08b23410378 (diff) | |
| download | nixlib-8dbd8f4d69fc8ed993f6e7798616df4c4dd96765.tar nixlib-8dbd8f4d69fc8ed993f6e7798616df4c4dd96765.tar.gz nixlib-8dbd8f4d69fc8ed993f6e7798616df4c4dd96765.tar.bz2 nixlib-8dbd8f4d69fc8ed993f6e7798616df4c4dd96765.tar.lz nixlib-8dbd8f4d69fc8ed993f6e7798616df4c4dd96765.tar.xz nixlib-8dbd8f4d69fc8ed993f6e7798616df4c4dd96765.tar.zst nixlib-8dbd8f4d69fc8ed993f6e7798616df4c4dd96765.zip | |
nixos/dnscrypt-proxy: fix apparmor profile and test
Test failed because of an incomplete apparmor profile. - fix apparmor profile - improve test timing, prevent non-deterministic failure
Diffstat (limited to 'nixos/modules/services/networking')
| -rw-r--r-- | nixos/modules/services/networking/dnscrypt-proxy.nix | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/nixos/modules/services/networking/dnscrypt-proxy.nix b/nixos/modules/services/networking/dnscrypt-proxy.nix index 857657eea4db..6f5e7d8d456e 100644 --- a/nixos/modules/services/networking/dnscrypt-proxy.nix +++ b/nixos/modules/services/networking/dnscrypt-proxy.nix @@ -192,6 +192,7 @@ in security.apparmor.profiles = singleton (pkgs.writeText "apparmor-dnscrypt-proxy" '' ${pkgs.dnscrypt-proxy}/bin/dnscrypt-proxy { /dev/null rw, + /dev/random r, /dev/urandom r, /etc/passwd r, @@ -211,6 +212,9 @@ in ${getLib pkgs.gcc.cc}/lib/libssp.so.* mr, ${getLib pkgs.libsodium}/lib/libsodium.so.* mr, ${getLib pkgs.systemd}/lib/libsystemd.so.* mr, + ${getLib pkgs.utillinuxMinimal.out}/lib/libmount.so.* mr, + ${getLib pkgs.utillinuxMinimal.out}/lib/libblkid.so.* mr, + ${getLib pkgs.utillinuxMinimal.out}/lib/libuuid.so.* mr, ${getLib pkgs.xz}/lib/liblzma.so.* mr, ${getLib pkgs.libgcrypt}/lib/libgcrypt.so.* mr, ${getLib pkgs.libgpgerror}/lib/libgpg-error.so.* mr, |