[Backport release-25.11] nixos/tetrd: remove CAP_DAC_OVERRIDE (#516482)

2026-07-26 10:30:32 +00:00 · 2026-05-04 12:45:39 +00:00
parent 5a843f4b89 df866b21b0
commit 73ff5b7d30
1 changed files with 1 additions and 4 deletions
--- a/nixos/modules/services/networking/tetrd.nix
+++ b/nixos/modules/services/networking/tetrd.nix
@@ -86,17 +86,14 @@

          BindPaths = [
            "/etc/tetrd/resolv.conf:/etc/resolv.conf"
-            "/run"
-            "/var/log"
+            "/run/tetrd:/run"
          ];

          CapabilityBoundingSet = [
-            "CAP_DAC_OVERRIDE"
            "CAP_NET_ADMIN"
          ];

          AmbientCapabilities = [
-            "CAP_DAC_OVERRIDE"
            "CAP_NET_ADMIN"
          ];
        };