pyrox.dev / nixpkgs
lol
fork atom

Merge pull request #262678 from plumelo/feat/esphome-proc-subset

esphome: remove ProcSubset from serviceConfig

authored by Martin Weinelt and committed by GitHub 3244b1ea 8082879a

+1 -1
unified split
+1 -1
nixos/modules/services/home-automation/esphome.nix
··· 112 ProtectKernelModules = true; 113 ProtectKernelTunables = true; 114 ProtectProc = "invisible"; 115 - ProcSubset = "pid"; 116 ProtectSystem = "strict"; 117 #RemoveIPC = true; # Implied by DynamicUser 118 RestrictAddressFamilies = [
··· 112 ProtectKernelModules = true; 113 ProtectKernelTunables = true; 114 ProtectProc = "invisible"; 115 + ProcSubset = "all"; # Using "pid" breaks bwrap 116 ProtectSystem = "strict"; 117 #RemoveIPC = true; # Implied by DynamicUser 118 RestrictAddressFamilies = [