colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

kiwix-serve: fix service sandboxing typo (ReadPaths -> ReadOnlyPaths)

Browse Source
This commit is contained in:
Colin
2024-11-10 05:07:13 +00:00
parent bde5bc5983
commit e2dfbfe829
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
modules/services/kiwix-serve.nix
View File

@@ -58,7 +58,7 @@ in
serviceConfig.ProtectProc = "invisible";
serviceConfig.ProtectSystem = "strict";
serviceConfig.RemoveIPC = true;
serviceConfig.ReadPaths = cfg.zimPaths;
serviceConfig.ReadOnlyPaths = cfg.zimPaths;
serviceConfig.RestrictAddressFamilies = "AF_UNIX AF_INET AF_INET6";
serviceConfig.RestrictNamespaces = true;
serviceConfig.RestrictSUIDSGID = true;