public
/
objectifier
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Try setting TMPDIR

This commit is contained in:
niten 2023-01-22 15:52:24 -08:00
parent 2446c2bd4b
commit 9ea8c59f48
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
objectifier-module.nix
View File

@ -63,17 +63,18 @@ in {
OBJECTIFIER_BUFFER_SIZE = "524288";
OBJECTIFIER_CLEANUP_MAX_AGE = toString cfg.cleanup.max_file_age;
OBJECTIFIER_CLEANUP_DELAY = toString cfg.cleanup.delay;
TMPDIR = "/tmp";
};
serviceConfig = {
PrivateUsers = true;
PrivateDevices = true;
# PrivateTmp = true;
# PrivateMounts = true;
# ProtectControlGroups = true;
PrivateTmp = true;
PrivateMounts = true;
ProtectControlGroups = true;
ProtectKernelTunables = true;
ProtectKernelModules = true;
# ProtectSystem = true;
# ProtectHostname = true;
ProtectSystem = true;
ProtectHostname = true;
ProtectHome = true;
ProtectClock = true;
ProtectKernelLogs = true;