pyrox.dev / nixpkgs
lol
fork atom

nixos/opendkim: Fix CapabilityBoundingSet option

An empty list results in no CapabilityBoundingSet at all, an empty
string however will set `CapabilityBoundingSet=`, which represents a
closed set.

Related: #120617

Martin Weinelt 3a960961 6af7bcbd

options
unified split
Changed files
+1 -1
nixos
modules
services
mail
opendkim.nix
+1 -1
nixos/modules/services/mail/opendkim.nix 
···

       
134

       
 

       
        ReadWritePaths = [ cfg.keyPath ];


     

       
135

       
 

       



     

       
136

       
 

       
        AmbientCapabilities = [];


     

       
137

       
-

       
        CapabilityBoundingSet = [];


     

       
138

       
 

       
        DevicePolicy = "closed";


     

       
139

       
 

       
        LockPersonality = true;


     

       
140

       
 

       
        MemoryDenyWriteExecute = true;


     
···

       
134

       
 

       
        ReadWritePaths = [ cfg.keyPath ];


     

       
135

       
 

       



     

       
136

       
 

       
        AmbientCapabilities = [];


     

       
137

       
+

       
        CapabilityBoundingSet = "";


     

       
138

       
 

       
        DevicePolicy = "closed";


     

       
139

       
 

       
        LockPersonality = true;


     

       
140

       
 

       
        MemoryDenyWriteExecute = true;