diff options
| author | MidAutumnMoon <me@418.im> | 2022-10-25 11:55:18 +0800 |
|---|---|---|
| committer | MidAutumnMoon <me@418.im> | 2022-10-25 11:55:18 +0800 |
| commit | d3a95ce32c6d3a83ed661eaf0a066a3b44e906e0 (patch) | |
| tree | 46dc8f57d5c64984dda3fe7d806863e7963891c0 /nixos/modules/services/mail | |
| parent | ba8041fc2bf51480e58b2985f184eb58a7777b4d (diff) | |
| download | nixpkgs-d3a95ce32c6d3a83ed661eaf0a066a3b44e906e0.tar nixpkgs-d3a95ce32c6d3a83ed661eaf0a066a3b44e906e0.tar.gz nixpkgs-d3a95ce32c6d3a83ed661eaf0a066a3b44e906e0.tar.bz2 nixpkgs-d3a95ce32c6d3a83ed661eaf0a066a3b44e906e0.tar.lz nixpkgs-d3a95ce32c6d3a83ed661eaf0a066a3b44e906e0.tar.xz nixpkgs-d3a95ce32c6d3a83ed661eaf0a066a3b44e906e0.tar.zst nixpkgs-d3a95ce32c6d3a83ed661eaf0a066a3b44e906e0.zip | |
nixos/listmonk: set proper SystemCallFilter
Diffstat (limited to 'nixos/modules/services/mail')
| -rw-r--r-- | nixos/modules/services/mail/listmonk.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/services/mail/listmonk.nix b/nixos/modules/services/mail/listmonk.nix index 7c298606a54..c4ea6747196 100644 --- a/nixos/modules/services/mail/listmonk.nix +++ b/nixos/modules/services/mail/listmonk.nix @@ -202,7 +202,7 @@ in { NoNewPrivileges = true; CapabilityBoundingSet = ""; SystemCallArchitecture = "native"; - SystemCallFilter = [ "@system-service" "~@privileged" "@resources" ]; + SystemCallFilter = [ "@system-service" "~@privileged" ]; ProtectDevices = true; ProtectControlGroups = true; ProtectKernelTunables = true; |