sokai/mynixos-config
1
1
Fork 0
forked from mirrors_public/oddlama_nix-config
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(kanidm): allow restarter to run

Browse source
This commit is contained in:
oddlama 2023-10-18 01:07:56 +02:00
parent c2e05c374f
commit a226ecb27f
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
modules/meta/kanidm.nix
View file

@ -88,10 +88,10 @@
ProtectHostname = true; ProtectHostname = true;
# Would re-mount paths ignored by temporary root # Would re-mount paths ignored by temporary root
#ProtectSystem = "strict"; #ProtectSystem = "strict";
ProtectControlGroups = true; # ProtectControlGroups = true; # needed for restarter script
ProtectKernelLogs = true; ProtectKernelLogs = true;
ProtectKernelModules = true; ProtectKernelModules = true;
ProtectKernelTunables = true; # ProtectKernelTunables = true; # needed for restarter script
ProtectProc = "invisible"; ProtectProc = "invisible";
RestrictAddressFamilies = []; RestrictAddressFamilies = [];
RestrictNamespaces = true; RestrictNamespaces = true;