Merge pull request #121865 from mweinelt/home-assistant

2021-05-06 18:05:00 +02:00
parent 51836ac425 398b0cf6bd
commit 6a09bc4405
6 changed files with 57 additions and 80 deletions
@@ -298,7 +298,7 @@ in {
        ProtectKernelModules = true;
        ProtectKernelTunables = true;
        ProtectProc = "invisible";
-        ProcSubset = "pid";
+        ProcSubset = "all";
        ProtectSystem = "strict";
        RemoveIPC = true;
        ReadWritePaths = let
@@ -308,9 +308,10 @@ in {
          allowPaths = if isList value then value else singleton value;
        in [ "${cfg.configDir}" ] ++ allowPaths;
        RestrictAddressFamilies = [
-          "AF_UNIX"
          "AF_INET"
          "AF_INET6"
+          "AF_NETLINK"
+          "AF_UNIX"
        ] ++ optionals (useComponent "bluetooth_tracker" || useComponent "bluetooth_le_tracker") [
          "AF_BLUETOOTH"
        ];