pyrox.dev / nixpkgs
lol
fork atom

Merge pull request #256906 from oddlama/fix-typesense-0.25.1

nixos/typesense: disable MemoryDenyWriteExecute which is needed since 0.25.1

authored by Nick Cao and committed by GitHub 1fe305df 4199b601

+2 -2
unified split
+2 -2
nixos/modules/services/search/typesense.nix
··· 83 83 Group = "typesense"; 84 84 85 85 StateDirectory = "typesense"; 86 - StateDirectoryMode = "0700"; 86 + StateDirectoryMode = "0750"; 87 87 88 88 # Hardening 89 89 CapabilityBoundingSet = ""; 90 90 LockPersonality = true; 91 - MemoryDenyWriteExecute = true; 91 + # MemoryDenyWriteExecute = true; needed since 0.25.1 92 92 NoNewPrivileges = true; 93 93 PrivateUsers = true; 94 94 PrivateTmp = true;