Commit 33550b6e authored by James Cook's avatar James Cook
Browse files

Merge pull request #5665 from joachifm/dnscrypt-proxy-apparmor-updates 

dnscrypt-proxy service: update AppArmor profile
parents f114979d 97bac259

nixos/modules/services/networking/dnscrypt-proxy.nix

+7 −2
Original line number Diff line number Diff line
@@ -88,7 +88,12 @@ in 
    security.apparmor.profiles = mkIf apparmorEnabled [

      (pkgs.writeText "apparmor-dnscrypt-proxy" ''



        ${dnscrypt-proxy}/sbin/dnscrypt-proxy {

        ${dnscrypt-proxy}/bin/dnscrypt-proxy {

          network inet stream,

          network inet6 stream,

          network inet dgram,

          network inet6 dgram,



          capability ipc_lock,

          capability net_bind_service,

          capability net_admin,
@@ -126,7 +131,7 @@ in 
      wantedBy = [ "multi-user.target" ];

      serviceConfig = {

        Type = "forking";

        ExecStart = "${dnscrypt-proxy}/sbin/dnscrypt-proxy ${toString daemonArgs}";

        ExecStart = "${dnscrypt-proxy}/bin/dnscrypt-proxy ${toString daemonArgs}";

      };

    };