summary refs log tree commit diff
path: root/nixos/modules/services/networking
diff options
context:
space:
mode:
authoralyaeanyx <alexandra.hollmeier@mailbox.org>2022-04-10 14:19:22 +0200
committeralyaeanyx <alexandra.hollmeier@mailbox.org>2022-04-10 14:19:22 +0200
commite4c93fb04c24119c40676de01ab08c9346e08a8f (patch)
tree0b42cc194ddbe2b7f492e0b8e7e9c9e6d539f1d4 /nixos/modules/services/networking
parent0c066f0d0e1ce6739a9a2f1e11429ddc22d8c7ba (diff)
downloadnixpkgs-e4c93fb04c24119c40676de01ab08c9346e08a8f.tar
nixpkgs-e4c93fb04c24119c40676de01ab08c9346e08a8f.tar.gz
nixpkgs-e4c93fb04c24119c40676de01ab08c9346e08a8f.tar.bz2
nixpkgs-e4c93fb04c24119c40676de01ab08c9346e08a8f.tar.lz
nixpkgs-e4c93fb04c24119c40676de01ab08c9346e08a8f.tar.xz
nixpkgs-e4c93fb04c24119c40676de01ab08c9346e08a8f.tar.zst
nixpkgs-e4c93fb04c24119c40676de01ab08c9346e08a8f.zip
nixos/openconnect: add hardening flags
Diffstat (limited to 'nixos/modules/services/networking')
-rw-r--r--nixos/modules/services/networking/openconnect.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/nixos/modules/services/networking/openconnect.nix b/nixos/modules/services/networking/openconnect.nix
index 7b2ef48e1c4..de4b505130e 100644
--- a/nixos/modules/services/networking/openconnect.nix
+++ b/nixos/modules/services/networking/openconnect.nix
@@ -103,6 +103,8 @@ let
           generateConfig name icfg
         } ${icfg.gateway}";
       StandardInput = "file:${icfg.passwordFile}";
+
+      ProtectHome = true;
     };
   };
 in {