Merge pull request #280561 from RaitoBezarius/fix-listmonk-module

nixos/mail/listmonk: fix hardening directives
2024-01-17 03:42:31 +01:00
parent 44596db607 4c84c9c1c3
commit bbd92ae047
1 changed files with 2 additions and 3 deletions
@@ -201,13 +201,12 @@ in {
        DynamicUser = true;
        NoNewPrivileges = true;
        CapabilityBoundingSet = "";
-        SystemCallArchitecture = "native";
+        SystemCallArchitectures = "native";
        SystemCallFilter = [ "@system-service" "~@privileged" ];
-        ProtectDevices = true;
+        PrivateDevices = true;
        ProtectControlGroups = true;
        ProtectKernelTunables = true;
        ProtectHome = true;
-        DeviceAllow = false;
        RestrictNamespaces = true;
        RestrictRealtime = true;
        UMask = "0027";