movefasta/nixpkgs
0
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-07-13 21:50:33 +03:00
Code Activity

vault: set coredump ulimit to 0

Browse source
This commit is contained in:
Jelle Besseling 2023-06-22 16:44:30 +02:00 • committed by GitHub
parent 04af42f3b3
commit 53a3ddfab8
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
nixos/modules/services/security/vault.nix
View file

@ -221,6 +221,7 @@ in
ProtectHome = "read-only"; ProtectHome = "read-only";
AmbientCapabilities = "cap_ipc_lock"; AmbientCapabilities = "cap_ipc_lock";
NoNewPrivileges = true; NoNewPrivileges = true;
LimitCORE = 0;
KillSignal = "SIGINT"; KillSignal = "SIGINT";
TimeoutStopSec = "30s"; TimeoutStopSec = "30s";
Restart = "on-failure"; Restart = "on-failure";