ilyakooo0/nixpkgs
1
0
Fork 0
mirror of https://github.com/ilyakooo0/nixpkgs.git synced 2024-11-16 18:37:04 +03:00
Code Issues Projects Releases Wiki Activity

nixos/unbound: note about the AmbientCapabilities

Browse Source
This commit is contained in:
Andreas Rammhold 2020-11-01 22:11:11 +01:00
parent 5e602f88d1
commit 72fbf05c17
No known key found for this signature in database
GPG Key ID: E432E410B5E48C86
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
nixos/modules/services/networking/unbound.nix
View File

@ -137,6 +137,7 @@ in
NotifyAccess = "main";
Type = "notify";
# FIXME: Which of these do we actualy need, can we drop the chroot flag?
AmbientCapabilities = [
"CAP_NET_BIND_SERVICE"
"CAP_NET_RAW"