Hi. You could also consider writing a polkit rule or using sudo.
> On 14 Sep 2016, at 19:29, Daniel Hlynskyi <[email protected]> wrote: > > Hi. I want to allow some user to restart systemd service. I found that setuid > wrappers should be used for this task. Here is what I've written: > > environment.systemPackages = [ > (pkgs.writeScriptBin "restart-defenders" '' > #!${pkgs.bash}/bin/bash > systemctl restart defenders.service > '') > ]; > > security.setuidPrograms = [ "restart-defenders" ]; > > File was created > > # ls -la /var/setuid-wrappers/restart-defenders > -r-s--x--x 1 root root 12856 Sep 14 17:17 > /var/setuid-wrappers/restart-defenders > > But when running as normal user I get > > $ restart-defenders > ==== AUTHENTICATING FOR org.freedesktop.systemd1.manage-units === > Authentication is required to restart 'defenders.service'. > Multiple identities can be used for authentication: > 1. System administrator (root) > 2: ... > > What am I doing wrong? > _______________________________________________ > nix-dev mailing list > [email protected] > http://lists.science.uu.nl/mailman/listinfo/nix-dev _______________________________________________ nix-dev mailing list [email protected] http://lists.science.uu.nl/mailman/listinfo/nix-dev
