nixos/gerrit: Enable PrivateMounts hardening in service config (#448492)

2025-10-05 13:24:15 +00:00
parent 6add87b7e5 26d0023f71
commit bf496bd1d2
1 changed files with 1 additions and 0 deletions
@@ -234,6 +234,7 @@ in
        LockPersonality = true;
        NoNewPrivileges = true;
        PrivateDevices = true;
+        PrivateMounts = true;
        PrivateTmp = true;
        ProtectClock = true;
        ProtectControlGroups = "strict";