From 9cca2eb4c80eb5e41d67349fab8bffdd38d577fc Mon Sep 17 00:00:00 2001 From: Philipp Bartsch Date: Sat, 18 Jul 2020 12:25:07 +0200 Subject: [PATCH] nixos/rspamd: fixup cosmetics --- nixos/modules/services/mail/rspamd.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/nixos/modules/services/mail/rspamd.nix b/nixos/modules/services/mail/rspamd.nix index 2707bd16cdb..07ef5461d05 100644 --- a/nixos/modules/services/mail/rspamd.nix +++ b/nixos/modules/services/mail/rspamd.nix @@ -405,8 +405,8 @@ in StateDirectory = "rspamd"; StateDirectoryMode = "0700"; - AmbientCapabilities = ""; - CapabilityBoundingSet = ""; + AmbientCapabilities = []; + CapabilityBoundingSet = []; DevicePolicy = "closed"; LockPersonality = true; NoNewPrivileges = true; @@ -423,7 +423,7 @@ in ProtectKernelTunables = true; ProtectSystem = "strict"; RemoveIPC = true; - RestrictAddressFamilies = "AF_INET AF_INET6 AF_UNIX"; + RestrictAddressFamilies = [ "AF_INET" "AF_INET6" "AF_UNIX" ]; RestrictNamespaces = true; RestrictRealtime = true; RestrictSUIDSGID = true;