pyrox.dev
lol
nixos/croc: set proper SystemCallFilter
+1
-1
+1
-1
nixos/modules/services/networking/croc.nix
+1
-1
nixos/modules/services/networking/croc.nix
···
72
72
RuntimeDirectoryMode = "700";
73
73
SystemCallFilter = [
74
74
"@system-service"
75
-
"~@aio" "~@keyring" "~@memlock" "~@privileged" "~@resources" "~@setuid" "~@sync" "~@timer"
75
+
"~@aio" "~@keyring" "~@memlock" "~@privileged" "~@setuid" "~@sync" "~@timer"
76
76
];
77
77
SystemCallArchitectures = "native";
78
78
SystemCallErrorNumber = "EPERM";