Merge pull request #30712 from peterhoeg/f/service

systemd user services shouldn't run as root and other "non-interactive" users
2019-08-02 11:58:27 +08:00
parent 43ac110d3b 0f04bbdc31
commit f2639566b5
3 changed files with 3 additions and 0 deletions
@@ -235,6 +235,7 @@ in
    systemd.user.services.ssh-agent = mkIf cfg.startAgent
      { description = "SSH Agent";
        wantedBy = [ "default.target" ];
+        unitConfig.ConditionUser = "!@system";
        serviceConfig =
          { ExecStartPre = "${pkgs.coreutils}/bin/rm -f %t/ssh-agent";
            ExecStart =