qbit/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/zigbee2mqtt: only add port to DeviceAllow if it is a path

Browse Source 
zigbee2mqtt supports having non-device ports (e.g. `tcp://`); those
should not be set in DeviceAllow. No URI will start with `/`, so use
that as the filter that it is a “real” device that needs to be allowed.
This commit is contained in:
Andrew Marshall 2024-11-12 13:20:18 -05:00
parent dc460ec76c
commit 577e162073
1 changed files with 1 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
nixos/modules/services/home-automation/zigbee2mqtt.nix
View File

@ -76,9 +76,7 @@ in
# Hardening # Hardening
CapabilityBoundingSet = ""; CapabilityBoundingSet = "";
DeviceAllow = [ DeviceAllow = lib.optionals (lib.hasPrefix "/" cfg.settings.serial.port) [ cfg.settings.serial.port ];
config.services.zigbee2mqtt.settings.serial.port
];
DevicePolicy = "closed"; DevicePolicy = "closed";
LockPersonality = true; LockPersonality = true;
MemoryDenyWriteExecute = false; MemoryDenyWriteExecute = false;