diff options
| author | Jörg Thalheim <Mic92@users.noreply.github.com> | 2021-05-17 12:06:06 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-05-17 12:06:06 +0100 |
| commit | b900661f6e26d9822a0bbc0e6b7b86c64cf816b3 (patch) | |
| tree | 6a884a917c7778cf85adb82dbceec13279649456 /nixos/modules/services/web-servers | |
| parent | 70b37f9bf2cb942231e622843992705a1f73eafb (diff) | |
| parent | feebe402f55fcb38b873370bee8fa09979018e85 (diff) | |
| download | nixpkgs-b900661f6e26d9822a0bbc0e6b7b86c64cf816b3.tar nixpkgs-b900661f6e26d9822a0bbc0e6b7b86c64cf816b3.tar.gz nixpkgs-b900661f6e26d9822a0bbc0e6b7b86c64cf816b3.tar.bz2 nixpkgs-b900661f6e26d9822a0bbc0e6b7b86c64cf816b3.tar.lz nixpkgs-b900661f6e26d9822a0bbc0e6b7b86c64cf816b3.tar.xz nixpkgs-b900661f6e26d9822a0bbc0e6b7b86c64cf816b3.tar.zst nixpkgs-b900661f6e26d9822a0bbc0e6b7b86c64cf816b3.zip | |
Merge pull request #122825 from Izorkin/update-duplicates-systemcallfilters
treewide: remove duplicates SystemCallFilters
Diffstat (limited to 'nixos/modules/services/web-servers')
| -rw-r--r-- | nixos/modules/services/web-servers/nginx/default.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/services/web-servers/nginx/default.nix b/nixos/modules/services/web-servers/nginx/default.nix index 705f041eeab..0e99aabcfc0 100644 --- a/nixos/modules/services/web-servers/nginx/default.nix +++ b/nixos/modules/services/web-servers/nginx/default.nix @@ -859,7 +859,7 @@ in PrivateMounts = true; # System Call Filtering SystemCallArchitectures = "native"; - SystemCallFilter = "~@chown @cpu-emulation @debug @keyring @ipc @module @mount @obsolete @privileged @raw-io @reboot @setuid @swap"; + SystemCallFilter = "~@cpu-emulation @debug @keyring @ipc @mount @obsolete @privileged @setuid"; }; }; |