Commit 9af10047 authored by royce-c's avatar royce-c
Browse files

nixos/chrony: fix memory locking issue with graphene-hardened-light 

The chronyd.service fails with 'graphene-hardened-light' unless enableMemoryLocking is set to false.
parent 5eac22df

nixos/modules/services/networking/ntp/chrony.nix

+2 −2
Original line number Diff line number Diff line
@@ -74,8 +74,8 @@ in 


      enableMemoryLocking = mkOption {

        type = types.bool;

        default = config.environment.memoryAllocator.provider != "graphene-hardened";

        defaultText = ''config.environment.memoryAllocator.provider != "graphene-hardened"'';

        default = config.environment.memoryAllocator.provider != "graphene-hardened" && config.environment.memoryAllocator.provider != "graphene-hardened-light";

        defaultText = ''config.environment.memoryAllocator.provider != "graphene-hardened" && config.environment.memoryAllocator.provider != "graphene-hardened-light"'';

        description = ''

          Whether to add the `-m` flag to lock memory.

        '';