nixos/wyoming/piper: relax ProcSubset to all (#447326)

2025-09-29 22:35:59 +00:00
parent 6c68c27000 3a4e4f6c3d
commit e0d526144a
1 changed files with 1 additions and 1 deletions
@@ -190,7 +190,7 @@ in
            ProtectKernelTunables = true;
            ProtectControlGroups = true;
            ProtectProc = "invisible";
-            ProcSubset = "pid";
+            ProcSubset = "all"; # for onnxruntime, which queries cpuinfo
            RestrictAddressFamilies = [
              "AF_INET"
              "AF_INET6"