liminix

commit f728b584a2297a2a61b826459f15a8289fa9ca3b
parent e04724d7fccda9d789a42a654874be4d1b21fb27
Author: Daniel Barlow <dan@telent.net>
Date:   Sun, 13 Apr 2025 23:00:47 +0100

add "nobody" user needed by rp-pppoe

Diffstat:
M
modules/ppp/default.nix
 | 
10
++++++++++

1 file changed, 10 insertions(+), 0 deletions(-)
diff --git a/modules/ppp/default.nix b/modules/ppp/default.nix
@@ -132,6 +132,16 @@ in
         description = "options supplied on ppp command line";
       };
     };
+
+    # rp-pppoe attempts to drop privs by switching to user "nobody"
+    users.nobody = {
+      uid = 65534;
+      gid = 65534;
+      gecos = "Captain Nemo";
+      dir = "/run/";
+      shell = "/bin/false";
+    };
+
     kernel = {
       config = {
         PPP = "y";