commit 86bccaf512d7bebfc4f2acb558326e5022bcd222 · pyrox.dev/nixpkgs

pyrox.dev / nixpkgs

lol

fork atom

nixos/murmur: Reverse order of allowed address families (#441983)

Grimmauld 3 months ago 86bccaf5 647e615a

options

unified split

Changed files

+4 -1

nixos

modules

services

networking

murmur.nix

+4 -1

nixos/modules/services/networking/murmur.nix

···

       350
       350
        
               ProtectKernelModules = true;

     

       351
       351
        
               ProtectKernelTunables = true;

     

       352
       352
        
               ProtectSystem = "full";

     

       353
       353
       -
               RestrictAddressFamilies = "~AF_PACKET AF_NETLINK";

     

       353
       353
       +
               RestrictAddressFamilies = [

     

       354
       354
       +
                 "AF_INET"

     

       355
       355
       +
                 "AF_INET6"

     

       356
       356
       +
               ];

     

       354
       357
        
               RestrictNamespaces = true;

     

       355
       358
        
               RestrictSUIDSGID = true;

     

       356
       359
        
               RestrictRealtime = true;