nixpkgs/nixos/modules/services
Joachim Fasting 97bac259d0 dnscrypt-proxy service: update AppArmor profile
This patch fixes the AppArmor profile path clause and adds
(currently ignored) network rules.

The AppArmor profile used to be defined for the path sbin/dnscrypt-proxy,
but the real path is bin/dnscrypt-proxy (due to sbin now being a symlink
to bin), which permitted the service to run unconfined.

Adding the network rules has no effect other than improving correctness,
as the version of AppArmor in the NixOS kernel fails to enforce network
rules.
2015-01-09 15:08:07 +01:00
..
amqp nixos/rabbitmq: wait for start 2014-09-13 02:16:53 +02:00
audio services.mpd: use systemd's user option 2014-12-22 11:22:14 +00:00
backup Almir module: set a working default sqlalchemy_engine_url 2014-11-30 13:11:55 +01:00
cluster nixos: move kubernetes & fleet to services/cluster 2014-12-11 23:32:37 +01:00
computing/torque Merge recent master into staging 2014-09-13 21:48:29 +02:00
continuous-integration/jenkins Merge recent master into staging 2014-09-13 21:48:29 +02:00
databases doc: use postgresql94 2015-01-07 13:21:18 +01:00
desktops profile-sync-daemon: refactor module 2014-12-14 00:45:08 -05:00
games Fix some uid/gid attributes to match the actual user/group name 2014-04-29 10:51:42 +02:00
hardware Fix filename for udev network interface rules 2014-12-05 17:32:36 +01:00
logging Revert "Revert "syslog-ng: Update from 3.5.6 to 3.6.1"" 2014-11-06 21:59:04 +01:00
mail Fix user-facing typos (mainly in descriptions) 2014-12-30 03:31:03 +01:00
misc nixos/modules/services/misc/nix-daemon.nix: document meaning of '0' for the buildCores attribute 2015-01-05 15:38:08 +01:00
monitoring java: Normalize to the default jre / jdk 2015-01-07 14:55:41 -08:00
network-filesystems nixos/samba: Allow package version setting 2015-01-03 21:45:16 -08:00
networking dnscrypt-proxy service: update AppArmor profile 2015-01-09 15:08:07 +01:00
printing cups: Build with SERVERROOT set to /etc/cups 2014-12-16 18:23:41 +01:00
scheduling cron: make into systemd.service and make it depend on /etc/localtime 2014-12-15 14:50:12 +01:00
search java: More default cleanups 2015-01-07 14:55:41 -08:00
security resurrect torsocks-faster 2014-12-19 08:05:41 +02:00
system Added the cloud-init service 2014-12-03 13:22:13 +01:00
torrent nixos/peerflix: fix enable option description 2014-12-03 15:13:50 +01:00
ttys Make console-getty only used inside container by default 2014-09-02 01:36:10 +04:00
web-servers java: More default cleanups 2015-01-07 14:55:41 -08:00
x11 upower: use newer version by default 2014-12-27 22:46:46 +01:00