nixos/opensmtpd: explicit permissions for /var/spool/smtpd/queue (#406710) (871371a4) · Commits · nix / nixpkgs

nixos/modules/services/mail/opensmtpd.nix

+21 −5

Original line number	Diff line number	Diff line
		@@ -121,11 +121,27 @@ in
		}
		);

		systemd.tmpfiles.rules = [
		"d /var/spool/smtpd 711 root - - -"
		"d /var/spool/smtpd/offline 770 root smtpq - -"
		"d /var/spool/smtpd/purge 700 smtpq root - -"
		];
		systemd.tmpfiles.settings.opensmtpd = {
		"/var/spool/smtpd".d = {
		mode = "0711";
		user = "root";
		};
		"/var/spool/smtpd/offline".d = {
		mode = "0770";
		user = "root";
		group = "smtpq";
		};
		"/var/spool/smtpd/purge".d = {
		mode = "0700";
		user = "smtpq";
		group = "root";
		};
		"/var/spool/smtpd/queue".d = {
		mode = "0700";
		user = "smtpq";
		group = "root";
		};
		};

		systemd.services.opensmtpd =
		let