Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

acl: run mkdir, skip /

Browse Source
This commit is contained in:
lassulus 2022-05-28 12:19:51 +02:00
parent d9fe5d4629
commit 3c2e24df1c
1 changed files with 11 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
krebs/3modules/acl.nix
View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: let { config, lib, pkgs, ... }: let
parents = dir: parents = dir:
if dir == "/" then if dir == "/" then
[ dir ] []
else else
[ dir ] ++ parents (builtins.dirOf dir) [ dir ] ++ parents (builtins.dirOf dir)
; ;
@ -40,13 +40,16 @@ in {
pkgs.coreutils pkgs.coreutils
]; ];
serviceConfig = { serviceConfig = {
ExecStart = pkgs.writers.writeDash "acl" (lib.concatStrings ( ExecStart = pkgs.writers.writeDash "acl" ''
lib.mapAttrsToList (_: rule: '' mkdir -p "${path}"
setfacl -${lib.optionalString rule.recursive "R"}m ${rule.rule} ${path} ${lib.concatStrings (
${lib.optionalString rule.default "setfacl -${lib.optionalString rule.recursive "R"}dm ${rule.rule} ${path}"} lib.mapAttrsToList (_: rule: ''
${lib.optionalString rule.parents (lib.concatMapStringsSep "\n" (folder: "setfacl -m ${rule.rule} ${folder}") (parents path))} setfacl -${lib.optionalString rule.recursive "R"}m ${rule.rule} ${path}
'') rules ${lib.optionalString rule.default "setfacl -${lib.optionalString rule.recursive "R"}dm ${rule.rule} ${path}"}
)); ${lib.optionalString rule.parents (lib.concatMapStringsSep "\n" (folder: "setfacl -m ${rule.rule} ${folder}") (parents (builtins.dirOf path)))}
'') rules
)}
'';
RemainAfterExit = true; RemainAfterExit = true;
Type = "simple"; Type = "simple";
}; };