diff options
| author | Leo Famulari <leo@famulari.name> | 2021-03-16 21:36:36 -0400 |
|---|---|---|
| committer | Ludovic Courtès <ludo@gnu.org> | 2021-03-18 12:17:33 +0100 |
| commit | 898489f48e436e45e86e1ba0fcdb6df5cd5a051a (patch) | |
| tree | c9a100f2a5278eb0dfb629ec092f7f0d707c82a9 /gnu/services/base.scm | |
| parent | 45695cc8a7b56b711baf664ceedaa66124d6de26 (diff) | |
| download | guix-898489f48e436e45e86e1ba0fcdb6df5cd5a051a.tar guix-898489f48e436e45e86e1ba0fcdb6df5cd5a051a.tar.gz | |
services: Enable "protected hardlinks" and "protected symlinks" by default.
References:
https://sysctl-explorer.net/fs/protected_hardlinks/
https://sysctl-explorer.net/fs/protected_symlinks/
* gnu/services/sysctl.scm (%default-sysctl-settings): New public variable.
(<sysctl-configuration>): Use %default-sysctl-settings as the default value.
* gnu/services/base.scm (%base-services): Add sysctl-service-type.
* doc/guix.texi (Miscellaneous Services): Document the new defaults.
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
Diffstat (limited to 'gnu/services/base.scm')
| -rw-r--r-- | gnu/services/base.scm | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/gnu/services/base.scm b/gnu/services/base.scm index f6a490f712..f50bcfdcb4 100644 --- a/gnu/services/base.scm +++ b/gnu/services/base.scm @@ -35,6 +35,7 @@ #:use-module (gnu services) #:use-module (gnu services admin) #:use-module (gnu services shepherd) + #:use-module (gnu services sysctl) #:use-module (gnu system pam) #:use-module (gnu system shadow) ; 'user-account', etc. #:use-module (gnu system uuid) @@ -2532,6 +2533,8 @@ to handle." (udev-configuration (rules (list lvm2 fuse alsa-utils crda)))) + (service sysctl-service-type) + (service special-files-service-type `(("/bin/sh" ,(file-append bash "/bin/sh")) ("/usr/bin/env" ,(file-append coreutils "/bin/env")))))) |