Eelco Dolstra fd5bbdb436 nixos-containers: Set DevicePolicy=closed ...

This makes the container a bit more secure, by preventing root
creating device nodes to access the host file system, for
instance. (Reference: systemd-nspawn@.service in systemd.)

2016-07-28 17:58:55 +02:00

16 KiB

Raw Blame History

View Raw