Merge pull request #191854 from farnoy/patch-1

nixos/rust-motd: fix systemd service checks
This commit is contained in:
Christian Kögler 2022-10-01 10:09:59 +02:00 committed by GitHub
commit e6ffa3dfc9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -69,7 +69,7 @@ in {
ProtectKernelTunables = true;
ProtectSystem = "full";
StateDirectory = "rust-motd";
RestrictAddressFamilies = "none";
RestrictAddressFamilies = [ "AF_UNIX" ];
RestrictNamespaces = true;
RestrictRealtime = true;
RestrictSUIDSGID = true;