Simplify the SystemcallFilter by employing an explicit allow list, and an explicit block list. Node since version 18 requires syscalls in the @pkey group. Excluding @privileged and @resources is a recommendation in systemd-analyze. |
||
---|---|---|
.. | ||
doc/manual | ||
lib | ||
maintainers | ||
modules | ||
tests | ||
COPYING | ||
default.nix | ||
README | ||
release-combined.nix | ||
release-small.nix | ||
release.nix |
*** NixOS *** NixOS is a Linux distribution based on the purely functional package management system Nix. More information can be found at https://nixos.org/nixos and in the manual in doc/manual.