Merge pull request #119272 from mweinelt/babeld

nixos/babeld: allow AF_INET communication required for netlink socket
This commit is contained in:
Martin Weinelt
2021-04-13 03:25:51 +02:00
committed by GitHub
+1 -1
View File
@@ -102,7 +102,7 @@ in
ProtectKernelModules = true; ProtectKernelModules = true;
ProtectKernelLogs = true; ProtectKernelLogs = true;
ProtectControlGroups = true; ProtectControlGroups = true;
RestrictAddressFamilies = [ "AF_NETLINK" "AF_INET6" ]; RestrictAddressFamilies = [ "AF_NETLINK" "AF_INET6" "AF_INET" ];
RestrictNamespaces = true; RestrictNamespaces = true;
RestrictRealtime = true; RestrictRealtime = true;
RestrictSUIDSGID = true; RestrictSUIDSGID = true;