nixos/endlessh-go: set proper SystemCallFilter

sgeisenh · Oct 24, 2022 · 7415970 · 7415970
1 parent db02962
commit 7415970
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/nixos/modules/services/security/endlessh-go.nix b/nixos/modules/services/security/endlessh-go.nix
@@ -126,7 +126,7 @@ in
           RestrictRealtime = true;
           RestrictSUIDSGID = true;
           SystemCallArchitectures = "native";
-          SystemCallFilter = [ "@system-service" "~@resources" "~@privileged" ];
+          SystemCallFilter = [ "@system-service" "~@privileged" ];
         };
     };