cjdns service: protect /home and /tmp

2016-10-25 19:52:58 +02:00 · 2016-10-25 19:52:58 +02:00 · e94bd6f31d
parent 5fba586650
commit e94bd6f31d
1 changed files with 3 additions and 0 deletions
--- a/nixos/modules/services/networking/cjdns.nix
+++ b/nixos/modules/services/networking/cjdns.nix
@ -248,6 +248,9 @@ in
      serviceConfig = {
        Type = "forking";
        Restart = "on-failure";
+
+        ProtectHome = true;
+        PrivateTmp = true;
      };
    };