summary refs log tree commit diff
path: root/nixos
diff options
context:
space:
mode:
authorJanne Heß <janne@hess.ooo>2021-11-17 12:02:50 +0100
committerGitHub <noreply@github.com>2021-11-17 12:02:50 +0100
commitba34952f0d63e634975124da1b1f4474846908a8 (patch)
tree4ff7c35cb6b743ba36d05e6adeccbbee1f0b2f4f /nixos
parent8f47107a085d44f237193e60310bfefab7229a61 (diff)
parentc408cd921f8681df1eb813a8692ed740dacfe2d4 (diff)
downloadnixpkgs-ba34952f0d63e634975124da1b1f4474846908a8.tar
nixpkgs-ba34952f0d63e634975124da1b1f4474846908a8.tar.gz
nixpkgs-ba34952f0d63e634975124da1b1f4474846908a8.tar.bz2
nixpkgs-ba34952f0d63e634975124da1b1f4474846908a8.tar.lz
nixpkgs-ba34952f0d63e634975124da1b1f4474846908a8.tar.xz
nixpkgs-ba34952f0d63e634975124da1b1f4474846908a8.tar.zst
nixpkgs-ba34952f0d63e634975124da1b1f4474846908a8.zip
Merge pull request #146268 from helsinki-systems/upd/nginx
nginxStable: 1.20.1 -> 1.20.2
Diffstat (limited to 'nixos')
-rw-r--r--nixos/modules/services/web-servers/nginx/default.nix2
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/services/web-servers/nginx/default.nix b/nixos/modules/services/web-servers/nginx/default.nix
index be589e42ddd..5717b86b3be 100644
--- a/nixos/modules/services/web-servers/nginx/default.nix
+++ b/nixos/modules/services/web-servers/nginx/default.nix
@@ -896,7 +896,7 @@ in
         PrivateMounts = true;
         # System Call Filtering
         SystemCallArchitectures = "native";
-        SystemCallFilter = "~@cpu-emulation @debug @keyring @ipc @mount @obsolete @privileged @setuid";
+        SystemCallFilter = "~@cpu-emulation @debug @keyring @ipc @mount @obsolete @privileged @setuid @mincore";
       };
     };