diff --git a/nixos/modules/security/systemd-confinement.nix b/nixos/modules/security/systemd-confinement.nix
index 49fde2dcc6d..31b07b1b03d 100644
--- a/nixos/modules/security/systemd-confinement.nix
+++ b/nixos/modules/security/systemd-confinement.nix
@@ -52,11 +52,7 @@ in {
dependencies of this systemd unit, you can use
.
- Only the latter
- (${mkScOption "ExecStart"}) will be used if
- ${mkScOption "RootDirectoryStartOnly"} is enabled.
-
- Also, the store paths listed in are
+ The store paths listed in are
not included in the closure as
well as paths from other options except those listed
above.
@@ -133,8 +129,7 @@ in {
ProtectKernelTunables = wantsAPIVFS;
};
confinement.packages = let
- startOnly = config.serviceConfig.RootDirectoryStartOnly or false;
- execOpts = if startOnly then [ "ExecStart" ] else [
+ execOpts = [
"ExecReload" "ExecStart" "ExecStartPost" "ExecStartPre" "ExecStop"
"ExecStopPost"
];