nixos/music-assistant: disable MemoryDenyWriteExecute (#523654)

This commit is contained in:
Martin Weinelt
2026-05-24 16:27:24 +00:00
committed by GitHub
@@ -155,7 +155,8 @@ in
CapabilityBoundingSet = [ "" ];
DevicePolicy = "closed";
LockPersonality = true;
MemoryDenyWriteExecute = !useYTMusic;
# breaks pyopenssl's cffi calls, used in remote access feature
MemoryDenyWriteExecute = false;
ProcSubset = "pid";
ProtectClock = true;
ProtectControlGroups = true;