1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-19 20:21:14 +00:00
nixpkgs/nixos
Silvan Mosberger 5e974362be
nixos/couchdb: Prevent it from chowning /var/log to couchdb:couchdb
The default for logFile is /var/log/couchdb.log, and the tmpfile rules chown
${dirOf cfg.logFile}, which is just /var/log, to couchdb:couchdb.

This was found by Edes' report on IRC, which looked like

    Detected unsafe path transition /var/log → /var/log/journal during canonicalization of /var/log/journal

While this bug has been present since the initial couchdb module in
62438c09f7 by @garbas, this wasn't a
problem, because the initial module only created and chowned /var/log
if it didn't exist yet, which can't occur because this gets created in
the initial phases of NixOS startup.

However with the recent move from manual preStart chown scripts to
systemd.tmpfiles.rules in 062efe018d (#59389),
this chown is suddenly running unconditionally at every system
activation, therefore triggering the above error.
2019-07-24 20:52:53 +02:00
..
doc Merge pull request #64151 from aanderse/httpd-extraSubservices 2019-07-23 21:58:40 -04:00
lib nixos-test-driver: allow configuration of net frontend and backend 2019-07-22 13:44:27 +03:00
maintainers treewide: Remove usage of isNull 2019-04-29 14:05:50 +02:00
modules nixos/couchdb: Prevent it from chowning /var/log to couchdb:couchdb 2019-07-24 20:52:53 +02:00
tests nixos/nextcloud: write config to additional config file 2019-07-22 18:29:52 +02:00
COPYING
default.nix
README
release-combined.nix
release-small.nix release-small.nix: Don't depend on currentSystem 2019-06-19 14:07:37 +02:00
release.nix

*** NixOS ***

NixOS is a Linux distribution based on the purely functional package
management system Nix.  More information can be found at
http://nixos.org/nixos and in the manual in doc/manual.