pleb/nix-bitcoin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Move service hardening flags into separate file

Browse Source
This commit is contained in:
Jonas Nick
2019-04-28 13:15:12 +00:00
parent 66095871c6
commit a089d65d25
11 changed files with 33 additions and 54 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/nix-bitcoin-services.nix
+12
View File
@@ -0,0 +1,12 @@
{
defaultHardening = {
PrivateTmp = "true";
ProtectSystem = "full";
NoNewPrivileges = "true";
PrivateDevices = "true";
MemoryDenyWriteExecute = "true";
};
}