Remove protections--it's running as user anyway

2022-07-01 15:33:44 -07:00 · 2022-07-01 15:33:44 -07:00 · 15ca0509a9
parent dc56919b03
commit 15ca0509a9
1 changed files with 0 additions and 10 deletions
--- a/module.nix
+++ b/module.nix
@ -66,16 +66,6 @@ in {
              --time-to-idle=${toString cfg.time-to-idle} \
              --delay-time=${toString cfg.delay-time}
        '';
-        PrivateTmp = true;
-        PrivateDevices = true;
-        ProtectSystem = "strict";
-        ProtectControlGroups = true;
-        ProtectKernelTunables = true;
-        ProtectKernelModules = true;
-        ProtectHostname = true;
-        ProtectHome = true;
-        ProtectClock = true;
-        ProtectKernelLogs = true;
        Restart = "always";
        StandardOutput = "journal";
      };