nixos/galene: do not restrict AF_NETLINK
Built-in TURN server requires AF_NETLINK address family.
This commit is contained in:
parent
9310806eb6
commit
64a71aea98
|
@ -186,7 +186,7 @@ in
|
|||
ProtectSystem = "strict";
|
||||
ReadWritePaths = cfg.recordingsDir;
|
||||
RemoveIPC = true;
|
||||
RestrictAddressFamilies = [ "AF_INET" "AF_INET6" ];
|
||||
RestrictAddressFamilies = [ "AF_INET" "AF_INET6" "AF_NETLINK" ];
|
||||
RestrictNamespaces = true;
|
||||
RestrictRealtime = true;
|
||||
RestrictSUIDSGID = true;
|
||||
|
|
Loading…
Reference in a new issue