alioth/nixpkgs
3
0
Fork 0
forked from mirrors/nixpkgs
Code Releases Activity

nixos/rspamd: fixup cosmetics

Browse source
This commit is contained in:
Philipp Bartsch 2020-07-18 12:25:07 +02:00
parent 7e9f3e9eb1
commit 9cca2eb4c8
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
nixos/modules/services/mail/rspamd.nix
View file

@ -405,8 +405,8 @@ in
StateDirectory = "rspamd"; StateDirectory = "rspamd";
StateDirectoryMode = "0700"; StateDirectoryMode = "0700";
AmbientCapabilities = ""; AmbientCapabilities = [];
CapabilityBoundingSet = ""; CapabilityBoundingSet = [];
DevicePolicy = "closed"; DevicePolicy = "closed";
LockPersonality = true; LockPersonality = true;
NoNewPrivileges = true; NoNewPrivileges = true;
@ -423,7 +423,7 @@ in
ProtectKernelTunables = true; ProtectKernelTunables = true;
ProtectSystem = "strict"; ProtectSystem = "strict";
RemoveIPC = true; RemoveIPC = true;
RestrictAddressFamilies = "AF_INET AF_INET6 AF_UNIX"; RestrictAddressFamilies = [ "AF_INET" "AF_INET6" "AF_UNIX" ];
RestrictNamespaces = true; RestrictNamespaces = true;
RestrictRealtime = true; RestrictRealtime = true;
RestrictSUIDSGID = true; RestrictSUIDSGID = true;