diff options
| -rw-r--r-- | nixos/modules/services/mail/rspamd.nix | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/nixos/modules/services/mail/rspamd.nix b/nixos/modules/services/mail/rspamd.nix index 2707bd16cdb..07ef5461d05 100644 --- a/nixos/modules/services/mail/rspamd.nix +++ b/nixos/modules/services/mail/rspamd.nix @@ -405,8 +405,8 @@ in StateDirectory = "rspamd"; StateDirectoryMode = "0700"; - AmbientCapabilities = ""; - CapabilityBoundingSet = ""; + AmbientCapabilities = []; + CapabilityBoundingSet = []; DevicePolicy = "closed"; LockPersonality = true; NoNewPrivileges = true; @@ -423,7 +423,7 @@ in ProtectKernelTunables = true; ProtectSystem = "strict"; RemoveIPC = true; - RestrictAddressFamilies = "AF_INET AF_INET6 AF_UNIX"; + RestrictAddressFamilies = [ "AF_INET" "AF_INET6" "AF_UNIX" ]; RestrictNamespaces = true; RestrictRealtime = true; RestrictSUIDSGID = true; |