Unverified Commit f0335d8e authored by Thomas Gerbet's avatar Thomas Gerbet Committed by GitHub
Browse files

nixos/redmine: Set ProtectControlGroups to `strict` (#448634)

parents fc547298 4fb64fb8

nixos/modules/services/misc/redmine.nix

+1 −1
Original line number Diff line number Diff line
@@ -467,7 +467,7 @@ in 
        PrivateTmp = true;

        ProcSubset = "pid";

        ProtectClock = true;

        ProtectControlGroups = true;

        ProtectControlGroups = "strict";

        ProtectHome = true;

        ProtectHostname = true;

        ProtectKernelLogs = true;