Commit 21d81266 authored by Felix Singer's avatar Felix Singer
Browse files

nixos/murmur: Enable PrivateMounts hardening in service config 



Signed-off-by: default avatarFelix Singer <felixsinger@posteo.net>
parent 0d4f673a

nixos/modules/services/networking/murmur.nix

+1 −0
Original line number Diff line number Diff line
@@ -347,6 +347,7 @@ in 
        MemoryDenyWriteExecute = true;

        NoNewPrivileges = true;

        PrivateDevices = true;

        PrivateMounts = true;

        PrivateTmp = true;

        ProtectClock = true;

        ProtectControlGroups = true;