Unverified Commit a9725950 authored by Martin Weinelt's avatar Martin Weinelt Committed by GitHub
Browse files

nixos/tetrd: remove CAP_DAC_OVERRIDE (#516307)

parents cdcc1e9d b1732ebd

nixos/modules/services/networking/tetrd.nix

+1 −4
Original line number Diff line number Diff line
@@ -89,17 +89,14 @@ 


          BindPaths = [

            "/etc/tetrd/resolv.conf:/etc/resolv.conf"

            "/run"

            "/var/log"

            "/run/tetrd:/run"

          ];



          CapabilityBoundingSet = [

            "CAP_DAC_OVERRIDE"

            "CAP_NET_ADMIN"

          ];



          AmbientCapabilities = [

            "CAP_DAC_OVERRIDE"

            "CAP_NET_ADMIN"

          ];

        };