diff options
| author | Reuben D'Netto <rdnetto@gmail.com> | 2018-04-05 18:43:56 +1000 |
|---|---|---|
| committer | Reuben D'Netto <rdnetto@gmail.com> | 2018-04-12 09:39:14 +1000 |
| commit | 42a84598fb7baacc991c03e228a07a536bc0624a (patch) | |
| tree | a851974a590af5863bc2235e33a4670ce6c72a0c /nixos/modules/security/hidepid.xml | |
| parent | a683d2cd00780cf7d20caeeef44deb4cc60d2add (diff) | |
| download | nixlib-42a84598fb7baacc991c03e228a07a536bc0624a.tar nixlib-42a84598fb7baacc991c03e228a07a536bc0624a.tar.gz nixlib-42a84598fb7baacc991c03e228a07a536bc0624a.tar.bz2 nixlib-42a84598fb7baacc991c03e228a07a536bc0624a.tar.lz nixlib-42a84598fb7baacc991c03e228a07a536bc0624a.tar.xz nixlib-42a84598fb7baacc991c03e228a07a536bc0624a.tar.zst nixlib-42a84598fb7baacc991c03e228a07a536bc0624a.zip | |
Added cross-references to NixOS manual
Diffstat (limited to 'nixos/modules/security/hidepid.xml')
| -rw-r--r-- | nixos/modules/security/hidepid.xml | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/nixos/modules/security/hidepid.xml b/nixos/modules/security/hidepid.xml index 5715ee7ac165..d69341eb3cde 100644 --- a/nixos/modules/security/hidepid.xml +++ b/nixos/modules/security/hidepid.xml @@ -8,9 +8,9 @@ <para> Setting - <programlisting> - security.hideProcessInformation = true; - </programlisting> +<programlisting> +<xref linkend="opt-security.hideProcessInformation"/> = true; +</programlisting> ensures that access to process information is restricted to the owning user. This implies, among other things, that command-line arguments remain private. Unless your deployment relies on unprivileged @@ -25,9 +25,9 @@ <para> To allow a service <replaceable>foo</replaceable> to run without process information hiding, set - <programlisting> - systemd.services.<replaceable>foo</replaceable>.serviceConfig.SupplementaryGroups = [ "proc" ]; - </programlisting> +<programlisting> +<link linkend="opt-systemd.services._name_.serviceConfig">systemd.services.<replaceable>foo</replaceable>.serviceConfig</link>.SupplementaryGroups = [ "proc" ]; +</programlisting> </para> </chapter> |