diff options
author | Franz Pletz <fpletz@fnordicwalking.de> | 2017-08-21 19:24:17 +0200 |
---|---|---|
committer | Franz Pletz <fpletz@fnordicwalking.de> | 2017-08-21 19:24:17 +0200 |
commit | cfb716e6a5c5dd512b15e9dbbdd3b53b77b46ae7 (patch) | |
tree | 48ca9cba6c202f96d32cd606af17e91aa182fa31 /nixos/modules | |
parent | 775a7944c56f5348d7b8ecbff6f1938a4098341d (diff) | |
download | nixlib-cfb716e6a5c5dd512b15e9dbbdd3b53b77b46ae7.tar nixlib-cfb716e6a5c5dd512b15e9dbbdd3b53b77b46ae7.tar.gz nixlib-cfb716e6a5c5dd512b15e9dbbdd3b53b77b46ae7.tar.bz2 nixlib-cfb716e6a5c5dd512b15e9dbbdd3b53b77b46ae7.tar.lz nixlib-cfb716e6a5c5dd512b15e9dbbdd3b53b77b46ae7.tar.xz nixlib-cfb716e6a5c5dd512b15e9dbbdd3b53b77b46ae7.tar.zst nixlib-cfb716e6a5c5dd512b15e9dbbdd3b53b77b46ae7.zip |
phpfpm service: remove NoNewPrivileges systemd option
This interferes with sendmail because suid won't work. Fixes #26611.
Diffstat (limited to 'nixos/modules')
-rw-r--r-- | nixos/modules/services/web-servers/phpfpm/default.nix | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/nixos/modules/services/web-servers/phpfpm/default.nix b/nixos/modules/services/web-servers/phpfpm/default.nix index 26f546022035..f9febbfbacdf 100644 --- a/nixos/modules/services/web-servers/phpfpm/default.nix +++ b/nixos/modules/services/web-servers/phpfpm/default.nix @@ -150,7 +150,6 @@ in { PrivateDevices = true; ProtectSystem = "full"; ProtectHome = true; - NoNewPrivileges = true; RestrictAddressFamilies = "AF_UNIX AF_INET AF_INET6"; Type = "notify"; ExecStart = "${cfg.phpPackage}/bin/php-fpm -y ${cfgFile} -c ${phpIni}"; |