nixos/gotenberg: fix service config for chromium (#346639)

This commit is contained in:
Arne Keller 2024-12-06 11:10:15 +01:00 committed by GitHub
commit 63a6762cdf
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -228,7 +228,6 @@ in
ProtectKernelModules = true;
ProtectKernelTunables = true;
ProtectProc = "invisible";
ProcSubset = "pid";
RestrictAddressFamilies = [
"AF_UNIX"
@ -240,11 +239,10 @@ in
RestrictRealtime = true;
LockPersonality = true;
MemoryDenyWriteExecute = true;
SystemCallFilter = [
"@sandbox"
"@system-service"
"~@privileged"
];
SystemCallArchitectures = "native";