nixpkgs/nixos/modules
Dominique Martinet f8d78b9f67
confinement: fix assert for serviceConfig.ProtectSystem
serviceConfig.ProtectSystem is usually a string so if set, the assert
itself would error out leaving no useable trace:

  # nixos-rebuild switch --show-trace
  building Nix...
  building the system configuration...
  error: while evaluating the attribute 'config.system.build.toplevel' at /nix/var/nix/profiles/per-user/root/channels/nixos/nixos/modules/system/activation/top-level.nix:293:5:
  while evaluating 'foldr' at /nix/var/nix/profiles/per-user/root/channels/nixos/lib/lists.nix:52:20, called from /nix/var/nix/profiles/per-user/root/channels/nixos/nixos/modules/system/activation/top-level.nix:128:12:
  while evaluating 'fold'' at /nix/var/nix/profiles/per-user/root/channels/nixos/lib/lists.nix:55:15, called from /nix/var/nix/profiles/per-user/root/channels/nixos/lib/lists.nix:59:8:
  while evaluating anonymous function at /nix/var/nix/profiles/per-user/root/channels/nixos/nixos/modules/system/activation/top-level.nix:121:50, called from undefined position:
  while evaluating the attribute 'assertion' at /nix/var/nix/profiles/per-user/root/channels/nixos/nixos/modules/security/systemd-confinement.nix:163:7:
  value is a string while a Boolean was expected

Fix the check to give a sensible assert message instead; the attribute
should either be not set or false bool to pass.

Closes: #99000
2020-10-14 11:56:18 +02:00
..
config Revert "apparmor: fix and improve the service" 2020-10-07 12:22:18 +02:00
hardware nvidia-x11.vulkan_beta: init at 450.56.11 (#97882) 2020-09-24 10:53:05 -04:00
i18n/input-method input methods: add hime 2020-10-03 22:27:22 +08:00
installer Merge pull request #99615 from andir/use-configured-nix-for-installer 2020-10-05 21:00:29 -04:00
misc nixos/update-users-groups: /etc/shadow owned by root:shadow 2020-09-25 09:38:35 -07:00
profiles nixos/hardened: update blacklisted filesystems 2020-09-27 06:16:58 +00:00
programs nixos/xwayland: add new module and allow configuring a default font path 2020-10-04 14:56:30 +01:00
security confinement: fix assert for serviceConfig.ProtectSystem 2020-10-14 11:56:18 +02:00
services Merge pull request #100141 from xaverdh/xmonad-correct-path 2020-10-13 19:01:56 +02:00
system Merge pull request #98503 from jtojnar/doc-prompts 2020-09-24 22:48:38 +02:00
tasks doc: Document a workaround for using an FQDN as hostname 2020-10-10 10:48:54 -07:00
testing nixos/testing: remove remaining coverage-data logic 2020-09-05 16:07:59 +02:00
virtualisation Revert "apparmor: fix and improve the service" 2020-10-07 12:22:18 +02:00
module-list.nix Merge pull request #98917 from lovesegfault/klipper-init 2020-10-13 00:20:24 +02:00
rename.nix Merge pull request #91256 from prusnak/seeks 2020-09-18 16:32:33 +02:00