BoomMicrophone/nixpkgs-suyu
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

nixos/nats: set proper SystemCallFilter

Browse source
This commit is contained in:
MidAutumnMoon 2022-10-25 16:47:46 +08:00
parent afb8d0e5a6
commit 9b8fd74d68
No known key found for this signature in database
GPG key ID: 3B9D690FD7E4664A
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
nixos/modules/services/networking/nats.nix
View file

@ -137,7 +137,7 @@ in {
RestrictNamespaces = true;
RestrictRealtime = true;
RestrictSUIDSGID = true;
SystemCallFilter = [ "@system-service" "~@privileged" "~@resources" ];
SystemCallFilter = [ "@system-service" "~@privileged" ];
UMask = "0077";
}
];