diff options
| author | Jörg Thalheim <joerg@thalheim.io> | 2021-12-05 11:57:05 +0100 |
|---|---|---|
| committer | Jörg Thalheim <joerg@thalheim.io> | 2021-12-05 12:04:20 +0100 |
| commit | 8a5777dcf6c8b703c43b37bdd77d00e6b4fccb09 (patch) | |
| tree | b3245a64ae068fb767db81d57fff256aad27fc7c /nixos/modules/services/web-servers | |
| parent | af6071db609bdf86f5d36f0bc4a4ac0fe8e92c35 (diff) | |
| download | nixpkgs-8a5777dcf6c8b703c43b37bdd77d00e6b4fccb09.tar nixpkgs-8a5777dcf6c8b703c43b37bdd77d00e6b4fccb09.tar.gz nixpkgs-8a5777dcf6c8b703c43b37bdd77d00e6b4fccb09.tar.bz2 nixpkgs-8a5777dcf6c8b703c43b37bdd77d00e6b4fccb09.tar.lz nixpkgs-8a5777dcf6c8b703c43b37bdd77d00e6b4fccb09.tar.xz nixpkgs-8a5777dcf6c8b703c43b37bdd77d00e6b4fccb09.tar.zst nixpkgs-8a5777dcf6c8b703c43b37bdd77d00e6b4fccb09.zip | |
nixos/nginx: fix mincore filtering
Mincore is a syscall, not a group.
Diffstat (limited to 'nixos/modules/services/web-servers')
| -rw-r--r-- | nixos/modules/services/web-servers/nginx/default.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/services/web-servers/nginx/default.nix b/nixos/modules/services/web-servers/nginx/default.nix index 96e45cfc4f7..40d2fe05fce 100644 --- a/nixos/modules/services/web-servers/nginx/default.nix +++ b/nixos/modules/services/web-servers/nginx/default.nix @@ -900,7 +900,7 @@ in PrivateMounts = true; # System Call Filtering SystemCallArchitectures = "native"; - SystemCallFilter = "~@cpu-emulation @debug @keyring @ipc @mount @obsolete @privileged @setuid @mincore"; + SystemCallFilter = "~@cpu-emulation @debug @keyring @ipc @mount @obsolete @privileged @setuid mincore"; }; }; |