Remove protections--it's running as user anyway
This commit is contained in:
parent
dc56919b03
commit
15ca0509a9
10
module.nix
10
module.nix
|
@ -66,16 +66,6 @@ in {
|
||||||
--time-to-idle=${toString cfg.time-to-idle} \
|
--time-to-idle=${toString cfg.time-to-idle} \
|
||||||
--delay-time=${toString cfg.delay-time}
|
--delay-time=${toString cfg.delay-time}
|
||||||
'';
|
'';
|
||||||
PrivateTmp = true;
|
|
||||||
PrivateDevices = true;
|
|
||||||
ProtectSystem = "strict";
|
|
||||||
ProtectControlGroups = true;
|
|
||||||
ProtectKernelTunables = true;
|
|
||||||
ProtectKernelModules = true;
|
|
||||||
ProtectHostname = true;
|
|
||||||
ProtectHome = true;
|
|
||||||
ProtectClock = true;
|
|
||||||
ProtectKernelLogs = true;
|
|
||||||
Restart = "always";
|
Restart = "always";
|
||||||
StandardOutput = "journal";
|
StandardOutput = "journal";
|
||||||
};
|
};
|
||||||
|
|
Loading…
Reference in New Issue