Merge pull request #244750 from therishidesai/rdesai/fix-hostapd-hardening

nixos/hostapd: add AF_PACKET to RestrictAddressFamilies
2023-07-21 21:16:22 -06:00 · 2023-07-21 21:16:22 -06:00 · 0b411c1e04
parent ea8e05bea9 efba841aeb
commit 0b411c1e04
1 changed files with 1 additions and 0 deletions
--- a/nixos/modules/services/networking/hostapd.nix
+++ b/nixos/modules/services/networking/hostapd.nix
@ -1268,6 +1268,7 @@ in {
          "AF_INET6"
          "AF_NETLINK"
          "AF_UNIX"
+          "AF_PACKET"
        ];
        RestrictNamespaces = true;
        RestrictRealtime = true;