Unverified Commit 070e7cc1 authored by Martin Weinelt's avatar Martin Weinelt Committed by GitHub
Browse files

nixos/tlsrpt: fix permissions for postfix (#427915)

parents dddbe551 e48d1255

nixos/modules/services/mail/tlsrpt.nix

+11 −3
Original line number Diff line number Diff line
@@ -270,9 +270,17 @@ in 
      };

    };



    systemd.services.postfix.serviceConfig.SupplementaryGroups = mkIf (

      config.services.postfix.enable && cfg.collectd.configurePostfix

    ) [ "tlsrpt" ];

    users.users.tlsrpt = {

      isSystemUser = true;

      group = "tlsrpt";

    };

    users.groups.tlsrpt = { };



    users.users.postfix.extraGroups =

      lib.mkIf (config.services.postfix.enable && cfg.collectd.configurePostfix)

        [

          "tlsrpt"

        ];



    systemd.services.tlsrpt-collectd = {

      description = "TLSRPT datagram collector";

nixos/tests/tlsrpt.nix

+1 −1
Original line number Diff line number Diff line
@@ -35,7 +35,7 @@ 


    # Enabling postfix should put sendmail as the sendmail setting

    machine.succeed("grep -q sendmail_script=sendmail /etc/tlsrpt/reportd.cfg")

    machine.succeed("systemctl show --property SupplementaryGroups postfix.service | grep tlsrpt")

    machine.succeed("getent group tlsrpt | grep -q postfix")



    machine.log(machine.succeed("systemd-analyze security tlsrpt-collectd.service tlsrpt-reportd.service | grep -v ✓"))

  '';