Merge pull request #25670 from Mic92/cups-hardening

cups: mount private /tmp
2017-07-16 16:41:33 -04:00
parent 4a2f605398 731917a800
commit 3d176b7ff1
1 changed files with 2 additions and 0 deletions
--- a/nixos/modules/services/printing/cupsd.nix
+++ b/nixos/modules/services/printing/cupsd.nix
@@ -324,6 +324,8 @@ in
              fi
            ''}
          '';
+
+          serviceConfig.PrivateTmp = true;
      };

    systemd.services.cups-browsed = mkIf avahiEnabled