nixos/tetrd: remove CAP_DAC_OVERRIDE (#516307)

2026-05-04 12:09:48 +00:00
parent cdcc1e9d8b b1732ebd4e
commit a972595077
1 changed files with 1 additions and 4 deletions
@@ -89,17 +89,14 @@

          BindPaths = [
            "/etc/tetrd/resolv.conf:/etc/resolv.conf"
-            "/run"
-            "/var/log"
+            "/run/tetrd:/run"
          ];

          CapabilityBoundingSet = [
-            "CAP_DAC_OVERRIDE"
            "CAP_NET_ADMIN"
          ];

          AmbientCapabilities = [
-            "CAP_DAC_OVERRIDE"
            "CAP_NET_ADMIN"
          ];
        };