jacobpascual/nix-bitcoin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: update /proc restriction mechanism

Browse Source 
NixOS option `security.hideProcessInformation` for globally restricting
access to /proc has been removed.
Use per-service restrictions via 'ProtectProc' instead.

Rename
`nix-bitcoin.security.hideProcessInformation` to
`nix-bitcoin.security.dbusHideProcessInformation`
because this option now only implements the dbus restriction.
This commit is contained in:
Erik Arvstedt
2021-08-05 00:49:01 +02:00
parent 178a0dcf8f
commit 35fe939cf8
4 changed files with 23 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
modules/presets/secure-node.nix
View File

@@ -18,7 +18,7 @@ in {
networking.firewall.enable = true;
nix-bitcoin.security.hideProcessInformation = true;
nix-bitcoin.security.dbusHideProcessInformation = true;
# Use doas instead of sudo
security.doas.enable = true;