nixos/frigate: reduce visible process scope to cgroup (#493361)

2026-02-23 23:38:35 +00:00
parent 456441494b 4066e495b5
commit 2151c2d2a0
1 changed files with 3 additions and 0 deletions
@@ -759,6 +759,9 @@ in

        # Sockets/IPC
        RuntimeDirectory = "frigate";
+
+        # Reduce visible process scope to cgroup
+        ProtectProc = "invisible";
      };
    };
  };