mirror of
https://github.com/NixOS/nixpkgs.git
synced 2025-02-25 21:44:49 +00:00
nixos/akkoma: dont disable protectsystem in confinement mode
this works fine since #289593
This commit is contained in:
parent
a247fc94b4
commit
7952d92b82
@ -1072,7 +1072,7 @@ in {
|
||||
|
||||
ProtectProc = "noaccess";
|
||||
ProcSubset = "pid";
|
||||
ProtectSystem = mkIf (!isConfined) "strict";
|
||||
ProtectSystem = "strict";
|
||||
ProtectHome = true;
|
||||
PrivateTmp = true;
|
||||
PrivateDevices = true;
|
||||
|
Loading…
Reference in New Issue
Block a user