b12f/nixpkgs
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

nixos/galene: do not restrict AF_NETLINK

Browse source 
Built-in TURN server requires AF_NETLINK address family.
This commit is contained in:
Alexandre Iooss 2023-08-18 13:43:46 +02:00
parent 9310806eb6
commit 64a71aea98
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
nixos/modules/services/web-apps/galene.nix
View file

@ -186,7 +186,7 @@ in
ProtectSystem = "strict";
ReadWritePaths = cfg.recordingsDir;
RemoveIPC = true;
RestrictAddressFamilies = [ "AF_INET" "AF_INET6" ];
RestrictAddressFamilies = [ "AF_INET" "AF_INET6" "AF_NETLINK" ];
RestrictNamespaces = true;
RestrictRealtime = true;
RestrictSUIDSGID = true;