aboutsummaryrefslogtreecommitdiff
path: root/gnu/services/base.scm
diff options
context:
space:
mode:
authorLeo Famulari <leo@famulari.name>2021-03-16 21:36:36 -0400
committerLudovic Courtès <ludo@gnu.org>2021-03-18 12:17:33 +0100
commit898489f48e436e45e86e1ba0fcdb6df5cd5a051a (patch)
treec9a100f2a5278eb0dfb629ec092f7f0d707c82a9 /gnu/services/base.scm
parent45695cc8a7b56b711baf664ceedaa66124d6de26 (diff)
downloadguix-898489f48e436e45e86e1ba0fcdb6df5cd5a051a.tar
guix-898489f48e436e45e86e1ba0fcdb6df5cd5a051a.tar.gz
services: Enable "protected hardlinks" and "protected symlinks" by default.
References: https://sysctl-explorer.net/fs/protected_hardlinks/ https://sysctl-explorer.net/fs/protected_symlinks/ * gnu/services/sysctl.scm (%default-sysctl-settings): New public variable. (<sysctl-configuration>): Use %default-sysctl-settings as the default value. * gnu/services/base.scm (%base-services): Add sysctl-service-type. * doc/guix.texi (Miscellaneous Services): Document the new defaults. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
Diffstat (limited to 'gnu/services/base.scm')
-rw-r--r--gnu/services/base.scm3
1 files changed, 3 insertions, 0 deletions
diff --git a/gnu/services/base.scm b/gnu/services/base.scm
index f6a490f712..f50bcfdcb4 100644
--- a/gnu/services/base.scm
+++ b/gnu/services/base.scm
@@ -35,6 +35,7 @@
#:use-module (gnu services)
#:use-module (gnu services admin)
#:use-module (gnu services shepherd)
+ #:use-module (gnu services sysctl)
#:use-module (gnu system pam)
#:use-module (gnu system shadow) ; 'user-account', etc.
#:use-module (gnu system uuid)
@@ -2532,6 +2533,8 @@ to handle."
(udev-configuration
(rules (list lvm2 fuse alsa-utils crda))))
+ (service sysctl-service-type)
+
(service special-files-service-type
`(("/bin/sh" ,(file-append bash "/bin/sh"))
("/usr/bin/env" ,(file-append coreutils "/bin/env"))))))