ilyakooo0/nixpkgs
1
0
Fork 0
mirror of https://github.com/ilyakooo0/nixpkgs.git synced 2024-11-12 12:07:47 +03:00
Code Issues Projects Releases Wiki Activity

nixos/typesense: disable MemoryDenyWriteExecute which is needed since 0.25.1

Browse Source 
also adjust default state directory mode to allow typesense group
This commit is contained in:
oddlama 2023-09-23 16:37:23 +02:00
parent 9edb077ace
commit 11d4f6e4a8
No known key found for this signature in database
GPG Key ID: 14EFE510775FE39A
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
nixos/modules/services/search/typesense.nix
View File

@ -83,12 +83,12 @@ in {
Group = "typesense";
StateDirectory = "typesense";
StateDirectoryMode = "0700";
StateDirectoryMode = "0750";
# Hardening
CapabilityBoundingSet = "";
LockPersonality = true;
MemoryDenyWriteExecute = true;
# MemoryDenyWriteExecute = true; needed since 0.25.1
NoNewPrivileges = true;
PrivateUsers = true;
PrivateTmp = true;