diff options
author | Martin Weinelt <mweinelt@users.noreply.github.com> | 2021-06-18 20:15:05 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2021-06-18 20:15:05 +0200 |
commit | af664bf942b8bd0d6c00e1b025d4d704711fb0cd (patch) | |
tree | 607309acdf9b374af3c929907a0a17ac8a92cf85 /nixos/tests | |
parent | 6921dd89fcf21decd6de74c24e8fb5c29c579038 (diff) | |
parent | 36659d1efa4f745787026b5892f3f045293573ff (diff) | |
download | nixlib-af664bf942b8bd0d6c00e1b025d4d704711fb0cd.tar nixlib-af664bf942b8bd0d6c00e1b025d4d704711fb0cd.tar.gz nixlib-af664bf942b8bd0d6c00e1b025d4d704711fb0cd.tar.bz2 nixlib-af664bf942b8bd0d6c00e1b025d4d704711fb0cd.tar.lz nixlib-af664bf942b8bd0d6c00e1b025d4d704711fb0cd.tar.xz nixlib-af664bf942b8bd0d6c00e1b025d4d704711fb0cd.tar.zst nixlib-af664bf942b8bd0d6c00e1b025d4d704711fb0cd.zip |
Merge pull request #127127 from mweinelt/home-assistant
nixos/home-assistant: update hardening
Diffstat (limited to 'nixos/tests')
-rw-r--r-- | nixos/tests/home-assistant.nix | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/nixos/tests/home-assistant.nix b/nixos/tests/home-assistant.nix index c75dd248ecb3..f8f8e9fd183f 100644 --- a/nixos/tests/home-assistant.nix +++ b/nixos/tests/home-assistant.nix @@ -45,6 +45,7 @@ in { payload_on = "let_there_be_light"; payload_off = "off"; }]; + # tests component-based capability assignment (CAP_NET_BIND_SERVICE) emulated_hue = { host_ip = "127.0.0.1"; listen_port = 80; @@ -100,6 +101,7 @@ in { assert "let_there_be_light" in output_log with subtest("Check systemd unit hardening"): + hass.log(hass.succeed("systemctl show home-assistant.service")) hass.log(hass.succeed("systemd-analyze security home-assistant.service")) ''; }) |