Unverified Commit a4ced978 authored by Niklas Korz's avatar Niklas Korz Committed by GitHub
Browse files

nixos/murmur: Set ProtectSystem to `strict` (#442008)

parents d28e0f81 5b0ee7f9

nixos/modules/services/networking/murmur.nix

+4 −1
Original line number Diff line number Diff line
@@ -355,7 +355,10 @@ in 
        ProtectKernelLogs = true;

        ProtectKernelModules = true;

        ProtectKernelTunables = true;

        ProtectSystem = "full";

        ProtectSystem = "strict";

        ReadWritePaths = [

          cfg.stateDir

        ];

        RestrictAddressFamilies = [

          "AF_INET"

          "AF_INET6"