alioth/nixpkgs
3
0
Fork 0
forked from mirrors/nixpkgs
Code Releases Activity

nixos/endlessh-go: set proper SystemCallFilter

Browse source
This commit is contained in:
MidAutumnMoon 2022-10-24 10:46:56 +08:00 committed by zowoq
parent db029623b7
commit 7415970a3e
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
nixos/modules/services/security/endlessh-go.nix
View file

@ -126,7 +126,7 @@ in
RestrictRealtime = true;
RestrictSUIDSGID = true;
SystemCallArchitectures = "native";
SystemCallFilter = [ "@system-service" "~@resources" "~@privileged" ];
SystemCallFilter = [ "@system-service" "~@privileged" ];
};
};