colin/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #239208 from jelle-bigbridge/patch-1

Browse Source 
nixos/vault: set coredump ulimit to 0
This commit is contained in:
Nick Cao 2023-06-23 09:57:19 +08:00 committed by GitHub
commit e844ee1d27
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
nixos/modules/services/security/vault.nix
View File

@ -221,6 +221,7 @@ in
ProtectHome = "read-only";
AmbientCapabilities = "cap_ipc_lock";
NoNewPrivileges = true;
LimitCORE = 0;
KillSignal = "SIGINT";
TimeoutStopSec = "30s";
Restart = "on-failure";