nixos/tor: allow AF_NETLINK address family

Tor attempts to detect what external IP address a machine is using by listing addresses on all network interfaces on the system. This listing is done using getifaddrs(3), which relies on netlink in order to get IPv6 address information. This change fixes Tor not finding the relay's IPv6 address unless explicitly configured via either an ORPort directive or via DNS resolution of the machine hostname.
2021-08-25 06:03:41 +02:00
parent fa41cccba6
commit 6b70d3e911
1 changed files with 1 additions and 1 deletions
@@ -1022,7 +1022,7 @@ in
        ProtectKernelTunables = true;
        ProtectSystem = "strict";
        RemoveIPC = true;
-        RestrictAddressFamilies = [ "AF_UNIX" "AF_INET" "AF_INET6" ];
+        RestrictAddressFamilies = [ "AF_UNIX" "AF_INET" "AF_INET6" "AF_NETLINK" ];
        RestrictNamespaces = true;
        RestrictRealtime = true;
        RestrictSUIDSGID = true;