randogoth/deinonyxus
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

selinux fix

Browse source
This commit is contained in:
randogoth 2026-01-14 19:45:46 +02:00
parent 8e33e4fa3f
commit f65c6846f7
4 changed files with 23 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
files/system/etc/selinux/targeted/contexts/files/file_contexts.local Normal file
View file

@ -0,0 +1,2 @@
/nix(/.*)? system_u:object_r:bin_t:s0
/var/lib/nix-store(/.*)? system_u:object_r:bin_t:s0

5
files/system/etc/systemd/system/nix-daemon.service.d/selinux.conf Normal file
View file

@ -0,0 +1,5 @@
[Service]
# Run the daemon unconfined to avoid SELinux denials on the Nix store binaries.
SELinuxContext=system_u:system_r:unconfined_service_t:s0
ExecStart=
ExecStart=/usr/bin/nix-daemon-wrapper.sh --daemon