JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

nixos/babeld: allow AF_INET communication required for netlink socket

Browse Source 
This broke after seccomp was updated from 2.5.0 to 2.5.1 in 22148780.
This commit is contained in:
Martin Weinelt 2021-04-13 02:41:54 +02:00
parent 7289645071
commit 8e1e78a735
No known key found for this signature in database
GPG Key ID: 87C1E9888F856759
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nixos/modules/services/networking/babeld.nix
View File

@ -102,7 +102,7 @@ in
ProtectKernelModules = true;
ProtectKernelLogs = true;
ProtectControlGroups = true;
RestrictAddressFamilies = [ "AF_NETLINK" "AF_INET6" ];
RestrictAddressFamilies = [ "AF_NETLINK" "AF_INET6" "AF_INET" ];
RestrictNamespaces = true;
RestrictRealtime = true;
RestrictSUIDSGID = true;