nixos/rspamd: Fix CapabilityBoundingSet option

An empty list results in no CapabilityBoundingSet at all, an empty
string however will set `CapabilityBoundingSet=`, which represents a
closed set.

Related: #120617
This commit is contained in:
Martin Weinelt 2021-04-25 20:26:22 +02:00
parent 3a9609613d
commit 6f358fa1d4
No known key found for this signature in database
GPG key ID: 87C1E9888F856759

View file

@ -410,7 +410,7 @@ in
StateDirectoryMode = "0700";
AmbientCapabilities = [];
CapabilityBoundingSet = [];
CapabilityBoundingSet = "";
DevicePolicy = "closed";
LockPersonality = true;
NoNewPrivileges = true;