Merge pull request #191854 from farnoy/patch-1
nixos/rust-motd: fix systemd service checks
This commit is contained in:
commit
e6ffa3dfc9
|
@ -69,7 +69,7 @@ in {
|
||||||
ProtectKernelTunables = true;
|
ProtectKernelTunables = true;
|
||||||
ProtectSystem = "full";
|
ProtectSystem = "full";
|
||||||
StateDirectory = "rust-motd";
|
StateDirectory = "rust-motd";
|
||||||
RestrictAddressFamilies = "none";
|
RestrictAddressFamilies = [ "AF_UNIX" ];
|
||||||
RestrictNamespaces = true;
|
RestrictNamespaces = true;
|
||||||
RestrictRealtime = true;
|
RestrictRealtime = true;
|
||||||
RestrictSUIDSGID = true;
|
RestrictSUIDSGID = true;
|
||||||
|
|
Loading…
Reference in a new issue