diff --git a/nixos/modules/services/misc/sssd.nix b/nixos/modules/services/misc/sssd.nix index 4658f01ff5ac..e863b337a32e 100644 --- a/nixos/modules/services/misc/sssd.nix +++ b/nixos/modules/services/misc/sssd.nix @@ -158,18 +158,9 @@ in NotifyAccess = "main"; PIDFile = "/run/sssd.pid"; CapabilityBoundingSet = [ - "CAP_IPC_LOCK" - "CAP_CHOWN" "CAP_DAC_READ_SEARCH" - "CAP_KILL" - "CAP_NET_ADMIN" - "CAP_SYS_NICE" - "CAP_FOWNER" "CAP_SETGID" "CAP_SETUID" - "CAP_SYS_ADMIN" - "CAP_SYS_RESOURCE" - "CAP_BLOCK_SUSPEND" ]; Restart = "on-abnormal"; StateDirectory = baseNameOf dataDir;