Merge pull request #135626 from delroth/tor-netlink

nixos/tor: allow AF_NETLINK address family
This commit is contained in:
Bobby Rong
2021-09-14 22:57:34 +08:00
committed by GitHub

View File

@@ -1022,7 +1022,7 @@ in
ProtectKernelTunables = true;
ProtectSystem = "strict";
RemoveIPC = true;
RestrictAddressFamilies = [ "AF_UNIX" "AF_INET" "AF_INET6" ];
RestrictAddressFamilies = [ "AF_UNIX" "AF_INET" "AF_INET6" "AF_NETLINK" ];
RestrictNamespaces = true;
RestrictRealtime = true;
RestrictSUIDSGID = true;