c4patino/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-07-06 17:13:24 -05:00
Code Issues Projects Releases Packages Wiki Activity

nixos/meme-bingo-web: harden

Browse source
This commit is contained in:
Anna Aurora 2025-02-23 17:47:56 +01:00
commit 4d2bb49e75
No known key found for this signature in database
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
nixos/modules/services/web-apps/meme-bingo-web.nix
View file

@ -89,6 +89,9 @@ in
InaccessiblePaths = [
"/dev/shm"
"/sys"
"/run/dbus"
"/run/user"
"/run/nscd"
];
LockPersonality = true;
PrivateDevices = true;
@ -124,6 +127,8 @@ in
RemoveIPC = true;
NoNewPrivileges = true;
MemoryDenyWriteExecute = true;
ExecPaths = [ "/nix/store" ];
NoExecPaths = [ "/" ];
};
};
};