Merge pull request #61032 from dtzWill/feature/rngd-harden

rngd: harden service config, settings from arch
This commit is contained in:
Renaud 2019-05-11 23:36:57 +02:00 committed by GitHub
commit e8d7f17c81
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -42,6 +42,11 @@ in
serviceConfig = {
ExecStart = "${pkgs.rng-tools}/sbin/rngd -f"
+ optionalString cfg.debug " -d";
NoNewPrivileges = true;
PrivateNetwork = true;
PrivateTmp = true;
ProtectSystem = "full";
ProtectHome = true;
};
};
};