nordic-dev.net/nixpkgs
nordic-dev.net/nixpkgs
2
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-02-25 13:35:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

nixos/akkoma: dont disable protectsystem in confinement mode

Browse Source 
this works fine since #289593
This commit is contained in:
tcmal 2024-05-25 18:42:22 +01:00
parent a247fc94b4
commit 7952d92b82
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nixos/modules/services/web-apps/akkoma.nix
View File

@ -1072,7 +1072,7 @@ in {
ProtectProc = "noaccess"; ProtectProc = "noaccess";
ProcSubset = "pid"; ProcSubset = "pid";
ProtectSystem = mkIf (!isConfined) "strict"; ProtectSystem = "strict";
ProtectHome = true; ProtectHome = true;
PrivateTmp = true; PrivateTmp = true;
PrivateDevices = true; PrivateDevices = true;