movefasta/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-07-04 06:42:33 +03:00
Code Activity

Merge pull request #262678 from plumelo/feat/esphome-proc-subset

Browse source 
esphome: remove ProcSubset from serviceConfig
This commit is contained in:
Martin Weinelt 2023-10-23 00:46:21 +02:00 • committed by GitHub
commit 3244b1eaef
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
nixos/modules/services/home-automation/esphome.nix
View file

@ -112,7 +112,7 @@ in
ProtectKernelModules = true; ProtectKernelModules = true;
ProtectKernelTunables = true; ProtectKernelTunables = true;
ProtectProc = "invisible"; ProtectProc = "invisible";
ProcSubset = "pid"; ProcSubset = "all"; # Using "pid" breaks bwrap
ProtectSystem = "strict"; ProtectSystem = "strict";
#RemoveIPC = true; # Implied by DynamicUser #RemoveIPC = true; # Implied by DynamicUser
RestrictAddressFamilies = [ RestrictAddressFamilies = [