pyrox.dev / nixpkgs
lol
fork atom

Merge pull request #262678 from plumelo/feat/esphome-proc-subset

esphome: remove ProcSubset from serviceConfig

Martin Weinelt 3244b1ea 8082879a

options
unified split
Changed files
+1 -1
nixos
modules
services
home-automation
esphome.nix
+1 -1
nixos/modules/services/home-automation/esphome.nix 
···

       
112

       
112

       
 

       
        ProtectKernelModules = true;


     

       
113

       
113

       
 

       
        ProtectKernelTunables = true;


     

       
114

       
114

       
 

       
        ProtectProc = "invisible";


     

       
115

       

       
-

       
        ProcSubset = "pid";


     

       

       
115

       
+

       
        ProcSubset = "all"; # Using "pid" breaks bwrap


     

       
116

       
116

       
 

       
        ProtectSystem = "strict";


     

       
117

       
117

       
 

       
        #RemoveIPC = true; # Implied by DynamicUser


     

       
118

       
118

       
 

       
        RestrictAddressFamilies = [