All modules: ProtectSystem = strict

Add ReadWritePaths in all modules, except lnd which has ProtectSystem = full.
2020-05-22 15:47:01 +00:00
parent adc71b892e
commit a040e52854
10 changed files with 11 additions and 1 deletions
@@ -7,7 +7,7 @@ with lib;
 {
  defaultHardening = {
      PrivateTmp = "true";
-      ProtectSystem = "full";
+      ProtectSystem = "strict";
      ProtectHome = "true";
      NoNewPrivileges = "true";
      PrivateDevices = "true";