phpfpm service: allow netlink sockets for sendmail

Fixes #26611.
This commit is contained in:
Franz Pletz 2017-08-29 00:41:31 +02:00
parent 8d6682ca0b
commit 8e622d2689
No known key found for this signature in database
GPG Key ID: 846FDED7792617B4

View File

@ -150,7 +150,8 @@ in {
PrivateDevices = true;
ProtectSystem = "full";
ProtectHome = true;
RestrictAddressFamilies = "AF_UNIX AF_INET AF_INET6";
# XXX: We need AF_NETLINK to make the sendmail SUID binary from postfix work
RestrictAddressFamilies = "AF_UNIX AF_INET AF_INET6 AF_NETLINK";
Type = "notify";
ExecStart = "${cfg.phpPackage}/bin/php-fpm -y ${cfgFile} -c ${phpIni}";
ExecReload = "${pkgs.coreutils}/bin/kill -USR2 $MAINPID";