diff options
| author | Andreas Wiese <aw-nixos@meterriblecrew.net> | 2023-09-27 11:22:09 +0200 |
|---|---|---|
| committer | Andreas Wiese <aw-nixos@meterriblecrew.net> | 2023-09-27 11:22:09 +0200 |
| commit | 1e8b8e6d38be9bc0ec887e71e4ee8b0f50a4ddcd (patch) | |
| tree | 1d56afb4a54e5d16368e4e0a11dfe2fbe997b49c /nixos/modules/services/security | |
| parent | 0dd3452970256b77f1a157b9494d14e0f49e64df (diff) | |
| download | nixlib-1e8b8e6d38be9bc0ec887e71e4ee8b0f50a4ddcd.tar nixlib-1e8b8e6d38be9bc0ec887e71e4ee8b0f50a4ddcd.tar.gz nixlib-1e8b8e6d38be9bc0ec887e71e4ee8b0f50a4ddcd.tar.bz2 nixlib-1e8b8e6d38be9bc0ec887e71e4ee8b0f50a4ddcd.tar.lz nixlib-1e8b8e6d38be9bc0ec887e71e4ee8b0f50a4ddcd.tar.xz nixlib-1e8b8e6d38be9bc0ec887e71e4ee8b0f50a4ddcd.tar.zst nixlib-1e8b8e6d38be9bc0ec887e71e4ee8b0f50a4ddcd.zip | |
nixos/usbguard: don't use path literal for pure evaluation
PR#256295 reintroduced ruleFile option, but set the default as a path literal, which was a "string path" previously. This breaks evaluation for being impure: error: access to absolute path '/var/lib/usbguard/rules.conf' is forbidden in pure eval mode (use '--impure' to override)
Diffstat (limited to 'nixos/modules/services/security')
| -rw-r--r-- | nixos/modules/services/security/usbguard.nix | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/nixos/modules/services/security/usbguard.nix b/nixos/modules/services/security/usbguard.nix index 483bfe046df2..071e69975143 100644 --- a/nixos/modules/services/security/usbguard.nix +++ b/nixos/modules/services/security/usbguard.nix @@ -51,8 +51,8 @@ in ruleFile = mkOption { type = types.nullOr types.path; - default = /var/lib/usbguard/rules.conf; - example = /run/secrets/usbguard-rules; + default = "/var/lib/usbguard/rules.conf"; + example = "/run/secrets/usbguard-rules"; description = lib.mdDoc '' This tells the USBGuard daemon which file to load as policy rule set. |