Merge pull request #119427 from talyz/tengine-modules

tengine: Add modules to passthru
This commit is contained in:
Kim Lindberger
2021-04-14 17:42:01 +02:00
committed by GitHub
3 changed files with 11 additions and 3 deletions
@@ -818,7 +818,7 @@ in
ProtectControlGroups = true;
RestrictAddressFamilies = [ "AF_UNIX" "AF_INET" "AF_INET6" ];
LockPersonality = true;
MemoryDenyWriteExecute = !(builtins.any (mod: (mod.allowMemoryWriteExecute or false)) (optionals (cfg.package ? modules) cfg.package.modules));
MemoryDenyWriteExecute = !(builtins.any (mod: (mod.allowMemoryWriteExecute or false)) cfg.package.modules);
RestrictRealtime = true;
RestrictSUIDSGID = true;
PrivateMounts = true;