nixos/nats: set proper SystemCallFilter

2022-10-25 16:47:46 +08:00 · 2022-10-25 16:47:46 +08:00 · 9b8fd74d68
commit 9b8fd74d68
parent afb8d0e5a6
1 changed files with 1 additions and 1 deletions
--- a/nixos/modules/services/networking/nats.nix
+++ b/nixos/modules/services/networking/nats.nix
@ -137,7 +137,7 @@ in {
          RestrictNamespaces = true;
          RestrictRealtime = true;
          RestrictSUIDSGID = true;
-          SystemCallFilter = [ "@system-service" "~@privileged" "~@resources" ];
+          SystemCallFilter = [ "@system-service" "~@privileged" ];
          UMask = "0077";
        }
      ];