Commit 64a71aea authored by Alexandre Iooss's avatar Alexandre Iooss
Browse files

nixos/galene: do not restrict AF_NETLINK 

Built-in TURN server requires AF_NETLINK address family.
parent 9310806e

nixos/modules/services/web-apps/galene.nix

+1 −1
Original line number Diff line number Diff line
@@ -186,7 +186,7 @@ in 
          ProtectSystem = "strict";

          ReadWritePaths = cfg.recordingsDir;

          RemoveIPC = true;

          RestrictAddressFamilies = [ "AF_INET" "AF_INET6" ];

          RestrictAddressFamilies = [ "AF_INET" "AF_INET6" "AF_NETLINK" ];

          RestrictNamespaces = true;

          RestrictRealtime = true;

          RestrictSUIDSGID = true;