Commit eb746540 authored by happysalada's avatar happysalada Committed by Yt
Browse files

nixos/clamav: run as clamav user not root

parent ef6b8ff1

nixos/modules/services/security/clamav.nix

+4 −0
Original line number Diff line number Diff line
@@ -110,6 +110,8 @@ in 
      serviceConfig = {

        ExecStart = "${pkg}/bin/clamd";

        ExecReload = "${pkgs.coreutils}/bin/kill -USR2 $MAINPID";

        User = clamavUser;

        Group = clamavGroup;

        StateDirectory = "clamav";

        RuntimeDirectory = "clamav";

        PrivateTmp = "yes";
@@ -138,6 +140,8 @@ in 
        SuccessExitStatus = "1"; # if databases are up to date

        StateDirectory = "clamav";

        RuntimeDirectory = "clamav";

        User = clamavUser;

        Group = clamavGroup;

        PrivateTmp = "yes";

        PrivateDevices = "yes";

      };