Merge pull request #256906 from oddlama/fix-typesense-0.25.1

nixos/typesense: disable MemoryDenyWriteExecute which is needed since 0.25.1
2023-09-23 11:37:13 -04:00
parent 4199b6014e 11d4f6e4a8
commit 1fe305df27
1 changed files with 2 additions and 2 deletions
@@ -83,12 +83,12 @@ in {
        Group = "typesense";

        StateDirectory = "typesense";
-        StateDirectoryMode = "0700";
+        StateDirectoryMode = "0750";

        # Hardening
        CapabilityBoundingSet = "";
        LockPersonality = true;
-        MemoryDenyWriteExecute = true;
+        # MemoryDenyWriteExecute = true; needed since 0.25.1
        NoNewPrivileges = true;
        PrivateUsers = true;
        PrivateTmp = true;