Unverified Commit b17d512a authored by Florian Klink's avatar Florian Klink Committed by GitHub
Browse files

nixos/gerrit: Set ProtectControlGroups to `strict` (#448646)

parents 8068f3e8 37e40baa

nixos/modules/services/web-apps/gerrit.nix

+1 −1
Original line number Diff line number Diff line
@@ -234,7 +234,7 @@ in 
        PrivateDevices = true;

        PrivateTmp = true;

        ProtectClock = true;

        ProtectControlGroups = true;

        ProtectControlGroups = "strict";

        ProtectHome = true;

        ProtectHostname = true;

        ProtectKernelLogs = true;