nixos/murmur: Enable PrivateMounts hardening in service config

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-04 11:44:05 +02:00
parent 0d4f673a88
commit 21d81266c2
1 changed files with 1 additions and 0 deletions
@@ -347,6 +347,7 @@ in
        MemoryDenyWriteExecute = true;
        NoNewPrivileges = true;
        PrivateDevices = true;
+        PrivateMounts = true;
        PrivateTmp = true;
        ProtectClock = true;
        ProtectControlGroups = true;