Merge pull request #268634 from tie/redis-restrict-address-families

nixos/redis: loosen systemd address family restrictions
2023-11-27 20:06:29 -05:00
parent 9b696e80b8 5c898bec57
commit 3dba8d6fdb
1 changed files with 1 additions and 3 deletions
@@ -393,9 +393,7 @@ in {
        ProtectKernelModules = true;
        ProtectKernelTunables = true;
        ProtectControlGroups = true;
-        RestrictAddressFamilies =
-          optionals (conf.port != 0) ["AF_INET" "AF_INET6"] ++
-          optional (conf.unixSocket != null) "AF_UNIX";
+        RestrictAddressFamilies = [ "AF_INET" "AF_INET6" "AF_UNIX" ];
        RestrictNamespaces = true;
        LockPersonality = true;
        MemoryDenyWriteExecute = true;