nixos/murmur: Enable PrivateMounts hardening in service config (#448490)

2025-10-05 22:19:14 +00:00
parent 40fcde8503 21d81266c2
commit 20fcd7d4ac
1 changed files with 1 additions and 0 deletions
@@ -347,6 +347,7 @@ in
        MemoryDenyWriteExecute = true;
        NoNewPrivileges = true;
        PrivateDevices = true;
+        PrivateMounts = true;
        PrivateTmp = true;
        ProtectClock = true;
        ProtectControlGroups = true;