nixos/gotenberg: fix service config for chromium (#346639)

2024-12-06 11:10:15 +01:00
parent 00c682e770 65664d6ba2
commit 63a6762cdf
1 changed files with 1 additions and 3 deletions
@@ -228,7 +228,6 @@ in
        ProtectKernelModules = true;
        ProtectKernelTunables = true;
        ProtectProc = "invisible";
-        ProcSubset = "pid";

        RestrictAddressFamilies = [
          "AF_UNIX"
@@ -240,11 +239,10 @@ in
        RestrictRealtime = true;

        LockPersonality = true;
-        MemoryDenyWriteExecute = true;

        SystemCallFilter = [
+          "@sandbox"
          "@system-service"
-          "~@privileged"
        ];
        SystemCallArchitectures = "native";