colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

iptables: temporarily disable sandbox

Browse Source 
it was overrestrictive
This commit is contained in:
Colin
2024-09-01 21:24:19 +00:00
parent 8f4d4c97bc
commit 48fccebd1e
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
hosts/common/programs/assorted.nix
View File

@@ -790,9 +790,10 @@ in
# "/var/run/netns" # "/var/run/netns"
# ]; # ];
iptables.sandbox.method = "landlock"; iptables = {}; # TODO: sandbox
iptables.sandbox.net = "all"; # iptables.sandbox.method = "landlock";
iptables.sandbox.capabilities = [ "net_admin" ]; # iptables.sandbox.net = "all";
# iptables.sandbox.capabilities = [ "net_admin" ];
# iputils provides `ping` (and arping, clockdiff, tracepath) # iputils provides `ping` (and arping, clockdiff, tracepath)
iputils.sandbox.method = "landlock"; iputils.sandbox.method = "landlock";