Skynet/nixos
7
1
Fork 0
Code Issues 45 Pull requests 1 Projects Releases Packages Wiki Activity Actions

feat: set ACL's

Browse source
This commit is contained in:
silver 2025-09-05 22:11:46 +01:00
parent f47e95c61d
commit 534dabca19
Signed by: silver
GPG key ID: 36F93D61BAD3FD7D
1 changed files with 15 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

15
applications/itd/splunk/module.nix
View file

@ -47,6 +47,21 @@ in {
# might not be required # might not be required
networking.firewall.allowedTCPPorts = [8089]; networking.firewall.allowedTCPPorts = [8089];
# need to set access controls
systemd.tmpfiles.rules = [
"a /var/log - - - - u:splunk:rx"
"a /var/log/auth.log - - - - splunk:r"
"a /var/log/messages - - - - u:splunk:r"
"a /var/log/secure - - - - u:splunk:r"
"a /var/log/audit - - - - u:splunk:rx"
"a /var/log/audit.log - - - - u:splunk:r"
"a /var/log/audit/audit.log - - - - u:splunk:r"
"a /root - - - - u:splunk:rx"
"a /root/.bash_history - - - - u:splunk:r"
"a /home/* - - - - u:splunk:rx"
"a /home/*/.bash_history - - - - u:splunk:r"
];
# set up the core files # set up the core files
systemd.services."${name}_prestart" = { systemd.services."${name}_prestart" = {
wantedBy = [ wantedBy = [