add "nobody" user needed by rp-pppoe

2025-04-13 23:00:47 +01:00 · 2025-04-13 23:00:47 +01:00 · f728b584a2
commit f728b584a2
parent e04724d7fc
1 changed files with 10 additions and 0 deletions
--- a/modules/ppp/default.nix
+++ b/modules/ppp/default.nix
@ -132,6 +132,16 @@ in
        description = "options supplied on ppp command line";
      };
    };
+
+    # rp-pppoe attempts to drop privs by switching to user "nobody"
+    users.nobody = {
+      uid = 65534;
+      gid = 65534;
+      gecos = "Captain Nemo";
+      dir = "/run/";
+      shell = "/bin/false";
+    };
+
    kernel = {
      config = {
        PPP = "y";