b12f/nixpkgs
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

nixos/listmonk: set proper SystemCallFilter

Browse source
This commit is contained in:
MidAutumnMoon 2022-10-25 11:55:18 +08:00
parent ba8041fc2b
commit d3a95ce32c
No known key found for this signature in database
GPG key ID: 3B9D690FD7E4664A
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
nixos/modules/services/mail/listmonk.nix
View file

@ -202,7 +202,7 @@ in {
NoNewPrivileges = true;
CapabilityBoundingSet = "";
SystemCallArchitecture = "native";
SystemCallFilter = [ "@system-service" "~@privileged" "@resources" ];
SystemCallFilter = [ "@system-service" "~@privileged" ];
ProtectDevices = true;
ProtectControlGroups = true;
ProtectKernelTunables = true;