Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

users.users.<name?>.createHome clobbers permissions of /var/empty when users.users.<name?>.home is unset #14910

Closed
Ralith opened this issue Apr 23, 2016 · 1 comment
Closed

users.users.<name?>.createHome clobbers permissions of /var/empty when users.users.<name?>.home is unset #14910

Ralith opened this issue Apr 23, 2016 · 1 comment
Labels
0.kind: bug Something is broken 6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS

Comments

@Ralith
Copy link
Contributor

Ralith commented Apr 23, 2016 •
edited
Loading

Title sums it up pretty well. The default value of home is "/var/empty" and createHome modifies that to have the usual home directory permissions for that user, which breaks polkitd (among other things). It's easy to assume that createHome will default to creating a conventional /home/<name?> directory, so the documentation should be updated and/or the default behavior changed.

The polkitd breakage manifests with the following error when e.g. systemctl commands requiring authentication are ran:

Error getting authority: Error initializing authority: Error calling StartServiceByName for org.freedesktop.PolicyKit1: Timeout was reached (g-io-error-quark, 24)
@dezgeg dezgeg added 0.kind: bug Something is broken 6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS labels Apr 23, 2016
@domenkozar domenkozar mentioned this issue Sep 6, 2016
Closed
@domenkozar domenkozar mentioned this issue Sep 6, 2016
Merged
@domenkozar
Copy link
Member

#18365

domenkozar added a commit that referenced this issue Sep 7, 2016
@domenkozar
Make /var/empty immutable
e7adde7 
Fixes #14910 and #18358

Deployed to an existing server, restarted sshd and polkit to verify
they don't fail.'

(cherry picked from commit 8f95e6f)
Signed-off-by: Domen Kožar <domen@dev.si>
@domenkozar domenkozar mentioned this issue Oct 9, 2016
Merged
7 tasks
adrianpk added a commit to adrianpk/nixpkgs that referenced this issue May 31, 2024
@adrianpk
Make /var/empty immutable
88fd15d 
Fixes NixOS#14910 and NixOS#18358

Deployed to an existing server, restarted sshd and polkit to verify
they don't fail.'

(cherry picked from commit 8f95e6f)
Signed-off-by: Domen Kožar <domen@dev.si>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
0.kind: bug Something is broken 6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@Ralith @domenkozar @dezgeg