nixos/murmur: Reverse order of allowed address families (#441983)

2025-09-16 20:24:46 +00:00
parent 647e615a60 9309fd7508
commit 86bccaf512
1 changed files with 4 additions and 1 deletions
@@ -350,7 +350,10 @@ in
        ProtectKernelModules = true;
        ProtectKernelTunables = true;
        ProtectSystem = "full";
-        RestrictAddressFamilies = "~AF_PACKET AF_NETLINK";
+        RestrictAddressFamilies = [
+          "AF_INET"
+          "AF_INET6"
+        ];
        RestrictNamespaces = true;
        RestrictSUIDSGID = true;
        RestrictRealtime = true;