tobias/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-11-13 19:29:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

nixos/gerrit: Enable PrivateMounts hardening in service config

Browse source 
Signed-off-by: Felix Singer <felixsinger@posteo.net>
This commit is contained in:
Felix Singer 2025-10-04 11:58:09 +02:00
parent 40d07fb1a0
commit 26d0023f71
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
nixos/modules/services/web-apps/gerrit.nix
View file

@ -232,6 +232,7 @@ in
LockPersonality = true;
NoNewPrivileges = true;
PrivateDevices = true;
PrivateMounts = true;
PrivateTmp = true;
ProtectClock = true;
ProtectControlGroups = true;