b12f/nixpkgs
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Merge pull request #189934 from delroth/grafana-sandboxing

Browse source 
nixos/grafana: loosen systemd syscall sandboxing
This commit is contained in:
Luke Granger-Brown 2022-09-06 09:36:23 +01:00 committed by GitHub
parent 3b987a45a4 bfe73f9543
commit 8157e3d89f
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
nixos/modules/services/monitoring/grafana.nix
View file

@ -792,7 +792,7 @@ in {
SystemCallArchitectures = "native";
# Upstream grafana is not setting SystemCallFilter for compatibility
# reasons, see https://github.com/grafana/grafana/pull/40176
SystemCallFilter = [ "@system-service" "~@privileged" "~@resources" ];
SystemCallFilter = [ "@system-service" "~@privileged" ];
UMask = "0027";
};
preStart = ''