rngd: harden service config, from arch

This commit is contained in:
Will Dietz 2019-05-07 22:53:09 -05:00
parent a2bdd63c4f
commit e5d049e469

View file

@ -42,6 +42,11 @@ in
serviceConfig = {
ExecStart = "${pkgs.rng-tools}/sbin/rngd -f"
+ optionalString cfg.debug " -d";
NoNewPrivileges = true;
PrivateNetwork = true;
PrivateTmp = true;
ProtectSystem = "full";
ProtectHome = true;
};
};
};