nixos/akkoma: dont disable protectsystem in confinement mode

this works fine since #289593
This commit is contained in:
tcmal 2024-05-25 18:42:22 +01:00
parent a247fc94b4
commit 7952d92b82

View File

@ -1072,7 +1072,7 @@ in {
ProtectProc = "noaccess";
ProcSubset = "pid";
ProtectSystem = mkIf (!isConfined) "strict";
ProtectSystem = "strict";
ProtectHome = true;
PrivateTmp = true;
PrivateDevices = true;