fixup! WIP: temmie/userweb: inject users from passwd into httpd sandbox
Eval nix flake / evals (push) Successful in 8m52s

This commit is contained in:
2026-06-07 01:45:59 +09:00
parent e3e4e298be
commit a5bec764f7
2 changed files with 7 additions and 9 deletions
Generated
+4 -4
View File
@@ -337,11 +337,11 @@
]
},
"locked": {
"lastModified": 1780062186,
"narHash": "sha256-FSkwKO/56i9RddwSydK804fSnIvbczBnFJgr2/m+F9U=",
"lastModified": 1780764154,
"narHash": "sha256-Xvf9aBNLYDnbDKdtFjp5GEA/rZwVczHZWbJ0hac8Vv4=",
"ref": "main",
"rev": "db2b19f144af046161b7f9ca69ddaf3f06fcceea",
"revCount": 13,
"rev": "8b4541be73ee3bd6c60525b2f42605efe89398c9",
"revCount": 14,
"type": "git",
"url": "https://git.pvv.ntnu.no/Projects/passwd2systemd-users.git"
},
+3 -5
View File
@@ -312,13 +312,11 @@ in
group-file = "/run/httpd/pamunix-sync/group";
output-dir = "/run/httpd/systemd-userdb";
shadow-file = pkgs.emptyFile;
email-domain = "pvv.ntnu.no";
output-passwd = true;
ignore-user-file = toString ./ignore_user_file.txt;
ignore-group-file = toString ./ignore_group_file.txt;
set-default-umask = "0077";
set-default-mount-no-devices = "true";
set-default-mount-no-suid = "true";
set-default-mount-no-execute = "false";
};
in ''${lib.getExe pkgs.passwd2systemd-users} ${args}'')
"${lib.getExe' pkgs.coreutils "shred"} -u /run/httpd/pamunix-sync/passwd /run/httpd/pamunix-sync/group"