pyrox.dev / nixpkgs
lol
fork atom

nixos/gitea: set proper SystemCallFilter

remove trailing whitespace

MidAutumnMoon e04013af 0a657fb3

options
unified split
Changed files
+1 -1
nixos
modules
services
misc
gitea.nix
+1 -1
nixos/modules/services/misc/gitea.nix 
···

       
592

       
592

       
 

       
        PrivateMounts = true;


     

       
593

       
593

       
 

       
        # System Call Filtering


     

       
594

       
594

       
 

       
        SystemCallArchitectures = "native";


     

       
595

       

       
-

       
        SystemCallFilter = "~@clock @cpu-emulation @debug @keyring @memlock @module @mount @obsolete @raw-io @reboot @resources @setuid @swap";


     

       

       
595

       
+

       
        SystemCallFilter = "~@clock @cpu-emulation @debug @keyring @memlock @module @mount @obsolete @raw-io @reboot @setuid @swap";


     

       
596

       
596

       
 

       
      };


     

       
597

       
597

       
 

       



     

       
598

       
598

       
 

       
      environment = {