security/fortify
2
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 25 Wiki Activity

nix: set deny_devel correctly
All checks were successful
Test / Create distribution (push) Successful in 1m55s
Details
Test / Run NixOS test (push) Successful in 3m51s
Details

Browse Source 
Signed-off-by: Ophestra <cat@gensokyo.uk>
This commit is contained in:
Ophestra 2025-01-24 00:50:35 +09:00
parent ad6d0ee55f
commit efacaa40fa
Signed by: cat
SSH Key Fingerprint: SHA256:gQ67O0enBZ7UdZypgtspB2FDM1g3GVw8nX0XSdcFw8Q
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
nixos.nix
View File

@ -118,7 +118,8 @@ in
env env
; ;
syscall = { syscall = {
inherit (app) devel multiarch bluetooth; inherit (app) multiarch bluetooth;
deny_devel = !app.devel;
}; };
map_real_uid = app.mapRealUid; map_real_uid = app.mapRealUid;
no_new_session = app.tty; no_new_session = app.tty;