Browse Source

Merge pull request #70137 from michaelpj/fix-pam-variable-subst

nixos/system-environment: fix variable substitution
openssl
worldofpeace 3 years ago committed by GitHub
parent
commit
49bc1bf44a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 16
      nixos/modules/config/system-environment.nix

16
nixos/modules/config/system-environment.nix

@ -8,11 +8,6 @@ let
cfg = config.environment;
pamProfiles =
map
(replaceStrings ["$HOME" "$USER"] ["@{HOME}" "@{PAM_USER}"])
cfg.profiles;
in
{
@ -75,13 +70,20 @@ in
let
suffixedVariables =
flip mapAttrs cfg.profileRelativeSessionVariables (envVar: suffixes:
flip concatMap pamProfiles (profile:
flip concatMap cfg.profiles (profile:
map (suffix: "${profile}${suffix}") suffixes
)
);
# We're trying to use the same syntax for PAM variables and env variables.
# That means we need to map the env variables that people might use to their
# equivalent PAM variable.
# Note: PAM_USER is a PAM_ITEM, HOME is an environment variable, they have
# different syntax.
replaceEnvVars = replaceStrings ["$HOME" "$USER"] ["\${HOME}" "@{PAM_USER}"];
pamVariable = n: v:
''${n} DEFAULT="${concatStringsSep ":" (toList v)}"'';
''${n} DEFAULT="${concatStringsSep ":" (map replaceEnvVars (toList v))}"'';
pamVariables =
concatStringsSep "\n"

Loading…
Cancel
Save