Unverified Commit 3244b1ea authored by Martin Weinelt's avatar Martin Weinelt Committed by GitHub
Browse files

Merge pull request #262678 from plumelo/feat/esphome-proc-subset 

esphome: remove ProcSubset from serviceConfig
parents 8082879a bff068e5

nixos/modules/services/home-automation/esphome.nix

+1 −1
Original line number Diff line number Diff line
@@ -112,7 +112,7 @@ in 
        ProtectKernelModules = true;

        ProtectKernelTunables = true;

        ProtectProc = "invisible";

        ProcSubset = "pid";

        ProcSubset = "all"; # Using "pid" breaks bwrap

        ProtectSystem = "strict";

        #RemoveIPC = true; # Implied by DynamicUser

        RestrictAddressFamilies = [