Commit 1e8b8e6d authored by Andreas Wiese's avatar Andreas Wiese
Browse files

nixos/usbguard: don't use path literal for pure evaluation 

PR#256295 reintroduced ruleFile option, but set the default as a path
literal, which was a "string path" previously.  This breaks evaluation
for being impure:

  error: access to absolute path '/var/lib/usbguard/rules.conf' is forbidden in pure eval mode (use '--impure' to override)
parent 0dd34529

nixos/modules/services/security/usbguard.nix

+2 −2
Original line number Diff line number Diff line
@@ -51,8 +51,8 @@ in 


      ruleFile = mkOption {

        type = types.nullOr types.path;

        default = /var/lib/usbguard/rules.conf;

        example = /run/secrets/usbguard-rules;

        default = "/var/lib/usbguard/rules.conf";

        example = "/run/secrets/usbguard-rules";

        description = lib.mdDoc ''

          This tells the USBGuard daemon which file to load as policy rule set.