Unverified Commit ed9121e5 authored by Michele Guerini Rocco's avatar Michele Guerini Rocco Committed by GitHub
Browse files

Merge pull request #282758 from rht/hardware_no_network 

hddfancontrol & thinkfan: disable network access.
parents 9373b48f cee68718

nixos/modules/services/hardware/hddfancontrol.nix

+4 −0
Original line number Diff line number Diff line
@@ -60,6 +60,10 @@ in 
      systemd.services.hddfancontrol = {

        wantedBy = [ "multi-user.target" ];

        environment.HDDFANCONTROL_ARGS = lib.escapeShellArgs args;

        serviceConfig = {

          # Hardening

          PrivateNetwork = true;

        };

      };

    }

  );

nixos/modules/services/hardware/thinkfan.nix

+7 −2
Original line number Diff line number Diff line
@@ -217,8 +217,13 @@ in { 


    systemd.services = {

      thinkfan.environment.THINKFAN_ARGS = escapeShellArgs ([ "-c" configFile ] ++ cfg.extraArgs);

      thinkfan.serviceConfig.Restart = "on-failure";

      thinkfan.serviceConfig.RestartSec = "30s";

      thinkfan.serviceConfig = {

        Restart = "on-failure";

        RestartSec = "30s";



        # Hardening

        PrivateNetwork = true;

      };



      # must be added manually, see issue #81138

      thinkfan.wantedBy = [ "multi-user.target" ];