diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-06-25 03:59:52 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-06-25 04:57:41 +0900 |
| commit | 87e008d56de974947ebb99c2cc40b25d3c2cf43e (patch) | |
| tree | 31791911e5226d6ec04e3fac7d91b0bf53e63aa5 /nixos.nix | |
| parent | 399207321265307bb15f37d867f9370cd51c82a8 (diff) | |
treewide: rename to hakurei
Fortify makes little sense for a container tool.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'nixos.nix')
| -rw-r--r-- | nixos.nix | 15 |
1 files changed, 8 insertions, 7 deletions
@@ -18,7 +18,7 @@ let optionals ; - cfg = config.environment.fortify; + cfg = config.environment.hakurei; getsubuid = fid: aid: 1000000 + fid * 10000 + aid; getsubname = fid: aid: "u${toString fid}_a${toString aid}"; @@ -45,20 +45,21 @@ in in { assertion = (lists.length conflictingApps) == 0; - message = "the following fortify apps have conflicting identities: " + (builtins.concatStringsSep ", " conflictingApps); + message = "the following hakurei apps have conflicting identities: " + (builtins.concatStringsSep ", " conflictingApps); } ) ]; - security.wrappers.fsu = { - source = "${cfg.fsuPackage}/bin/fsu"; + security.wrappers.hsu = { + + source = "${cfg.hsuPackage}/bin/hsu"; setuid = true; owner = "root"; setgid = true; group = "root"; }; - environment.etc.fsurc = { + environment.etc.hsurc = { mode = "0400"; text = foldlAttrs ( acc: username: fid: @@ -200,7 +201,7 @@ in }; in pkgs.writeShellScriptBin app.name '' - exec fortify${if app.verbose then " -v" else ""} app ${pkgs.writeText "fortify-${app.name}.json" (builtins.toJSON conf)} $@ + exec hakurei${if app.verbose then " -v" else ""} app ${pkgs.writeText "hakurei-app-${app.name}.json" (builtins.toJSON conf)} $@ '' ) ] @@ -281,7 +282,7 @@ in getuser = fid: aid: { isSystemUser = true; createHome = true; - description = "Fortify subordinate user ${toString aid} (u${toString fid})"; + description = "Hakurei subordinate user ${toString aid} (u${toString fid})"; group = getsubname fid aid; home = getsubhome fid aid; uid = getsubuid fid aid; |
