mirror/guix
1
0
Fork 0
mirror of https://git.savannah.gnu.org/git/guix.git synced 2025-01-31 06:46:50 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

gnu: system: Add home-directory-permissions field to <user-account>.

Browse source 
* gnu/system/accounts.scm (<user-account>)[home-directory-permissions]: New
field.
(user-account-home-directory-permissions): New accessor.
* gnu/build/activation.scm (activate-users+groups): Use home directory
permission bits from the user account object.
* doc/guix.texi (User Accounts): Document new field.

Signed-off-by: Josselin Poiret <dev@jpoiret.xyz>
This commit is contained in:
David Thompson 2023-01-14 10:53:16 -05:00 committed by Josselin Poiret
parent 6c447ababf
commit e9a5eebc78
No known key found for this signature in database
GPG key ID: 505E40B916171A8A
3 changed files with 10 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
doc/guix.texi
View file

@ -18049,6 +18049,10 @@ administrator's choice; reconfiguring does @emph{not} change their name.
@item @code{home-directory} @item @code{home-directory}
This is the name of the home directory for the account. This is the name of the home directory for the account.
@item @code{home-directory-permissions} (default: @code{#o700})
The permission bits for the home directory. By default, full access is
granted to the user account and all other access is denied.
@item @code{create-home-directory?} (default: @code{#t}) @item @code{create-home-directory?} (default: @code{#t})
Indicates whether the home directory of this account should be created Indicates whether the home directory of this account should be created
if it does not exist yet. if it does not exist yet.

6
gnu/build/activation.scm
View file

@ -162,14 +162,14 @@ (define (activate-users+groups users groups)
group records) are all available." group records) are all available."
(define (make-home-directory user) (define (make-home-directory user)
(let ((home (user-account-home-directory user)) (let ((home (user-account-home-directory user))
(home-permissions (user-account-home-directory-permissions user))
(pwd (getpwnam (user-account-name user)))) (pwd (getpwnam (user-account-name user))))
(mkdir-p home) (mkdir-p home)
;; Always set ownership and permissions for home directories of system ;; Always set ownership and permissions for home directories of system
;; accounts. If a service needs looser permissions on its home ;; accounts.
;; directories, it can always chmod it in an activation snippet.
(chown home (passwd:uid pwd) (passwd:gid pwd)) (chown home (passwd:uid pwd) (passwd:gid pwd))
(chmod home #o700))) (chmod home home-permissions)))
(define system-accounts (define system-accounts
(filter (lambda (user) (filter (lambda (user)

3
gnu/system/accounts.scm
View file

@ -29,6 +29,7 @@ (define-module (gnu system accounts)
user-account-supplementary-groups user-account-supplementary-groups
user-account-comment user-account-comment
user-account-home-directory user-account-home-directory
user-account-home-directory-permissions
user-account-create-home-directory? user-account-create-home-directory?
user-account-shell user-account-shell
user-account-system? user-account-system?
@ -70,6 +71,8 @@ (define-record-type* <user-account>
(comment user-account-comment (default "")) (comment user-account-comment (default ""))
(home-directory user-account-home-directory (thunked) (home-directory user-account-home-directory (thunked)
(default (default-home-directory this-record))) (default (default-home-directory this-record)))
(home-directory-permissions user-account-home-directory-permissions
(default #o700))
(create-home-directory? user-account-create-home-directory? ;Boolean (create-home-directory? user-account-create-home-directory? ;Boolean
(default #t)) (default #t))
(shell user-account-shell ; gexp (shell user-account-shell ; gexp