nixos/jenkins: Set ProtectProc to invisible

For documentation see https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectProc= Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 16:07:30 +02:00
parent d969bdbeda
commit bfae9b0212
1 changed files with 1 additions and 0 deletions
@@ -272,6 +272,7 @@ in
        ProtectKernelLogs = true;
        ProtectKernelModules = true;
        ProtectKernelTunables = true;
+        ProtectProc = "invisible";
        ProtectSystem = "full";
        RemoveIPC = true;
        RestrictAddressFamilies = [