From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id YF0BI5mEhV8iBgAA0tVLHw (envelope-from ) for ; Tue, 13 Oct 2020 10:42:33 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id yCruHpmEhV+ofQAA1q6Kng (envelope-from ) for ; Tue, 13 Oct 2020 10:42:33 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 00C5F94014A for ; Tue, 13 Oct 2020 10:42:33 +0000 (UTC) Received: from localhost ([::1]:50544 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kSHlH-0006JB-Sr for larch@yhetil.org; Tue, 13 Oct 2020 06:42:31 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:57200) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kSHl5-0006Fo-AW for help-guix@gnu.org; Tue, 13 Oct 2020 06:42:19 -0400 Received: from mout01.posteo.de ([185.67.36.65]:47158) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kSHl2-0004jT-Sl for help-guix@gnu.org; Tue, 13 Oct 2020 06:42:19 -0400 Received: from submission (posteo.de [89.146.220.130]) by mout01.posteo.de (Postfix) with ESMTPS id D81B2160061 for ; Tue, 13 Oct 2020 12:42:13 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.ro; s=2017; t=1602585733; bh=4F6K0Keu7LpyBFldzlbSK4is1h6bTjfKWiteRMZQUPM=; h=From:To:Cc:Subject:Date:From; b=aNrQ2SadwYNw7QJpcbQ3dD0hSSg/QSdpCeOt0qvkxh9kYk/KI5UYff6QOdAVw2bQm YB3tdrc3QaY0fKgIkfT1CIzLRyj2zoOF3fS+WOFLLqsu8LRSGicUt83wmglxJnK5i4 lBTmYuxIJ2+I9Ld0zEQPSdujMLYjsOyRwnb5a26oCwVpD6IObkD7OC38z98YZ20k/3 oa0GBTDGItpqtUDC0wPQI5C2YvpXOBfDfxH25rn2WJs76rZIcILLMnvlMtyJEwTPO3 gLE9fusPbG3RDVs67tonhPowD9X7h5doJuhd4BQd8pXbW/ckqI5WWhhV9SLaGZmHv6 4QSzI2ePSu4HA== Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 4C9XDP16XLz6tmF; Tue, 13 Oct 2020 12:42:12 +0200 (CEST) From: Alexandru-Sergiu Marton To: divoplade Subject: Re: Disable user profiles? References: <87ft6j46mh.fsf@posteo.ro> Date: Tue, 13 Oct 2020 16:42:35 +0300 In-Reply-To: (divoplade's message of "Mon, 12 Oct 2020 18:55:13 +0200") Message-ID: <87blh644z8.fsf@posteo.ro> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=185.67.36.65; envelope-from=brown121407@posteo.ro; helo=mout01.posteo.de X-detected-operating-system: by eggs.gnu.org: First seen = 2020/10/13 05:09:07 X-ACL-Warn: Detected OS = Linux 3.11 and newer [fuzzy] X-Spam_score_int: 2 X-Spam_score: 0.2 X-Spam_bar: / X-Spam_report: (0.2 / 5.0 requ) BAYES_00=-1.9, DATE_IN_FUTURE_03_06=3.027, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: help-guix@gnu.org Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Scanner: scn0 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=posteo.ro header.s=2017 header.b=aNrQ2Sad; dmarc=pass (policy=none) header.from=posteo.ro; spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-Spam-Score: 3.29 X-TUID: 8C8ju8nIpt7o Hello divoplade, divoplade writes: > Maybe you could make the guix daemon socket only available to root. For > this see the parameter --listen=endpoint of guix daemon > https://guix.gnu.org/manual/en/html_node/Invoking-guix_002ddaemon.html > > I never did something like that, so I can't be sure it will work. I > still hope it helps you. Thank you so much for your advice! Setting the permissions for the daemon socket such that only root can read and write to it has solved my problem. Cheers, Sergiu