diff options
| author | Graham Christensen <graham@grahamc.com> | 2017-07-16 16:41:33 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2017-07-16 16:41:33 -0400 |
| commit | 3d176b7ff1a23e12d007d8c108463dc636959a68 (patch) | |
| tree | fb79564f95999f1af14a36059c7eb3599898ee3b /nixos | |
| parent | 4a2f605398ead9246593a89d351723169dfb447f (diff) | |
| parent | 731917a800aaf7acbd8d20a0c45ac30d35204f32 (diff) | |
| download | nixlib-3d176b7ff1a23e12d007d8c108463dc636959a68.tar nixlib-3d176b7ff1a23e12d007d8c108463dc636959a68.tar.gz nixlib-3d176b7ff1a23e12d007d8c108463dc636959a68.tar.bz2 nixlib-3d176b7ff1a23e12d007d8c108463dc636959a68.tar.lz nixlib-3d176b7ff1a23e12d007d8c108463dc636959a68.tar.xz nixlib-3d176b7ff1a23e12d007d8c108463dc636959a68.tar.zst nixlib-3d176b7ff1a23e12d007d8c108463dc636959a68.zip | |
Merge pull request #25670 from Mic92/cups-hardening
cups: mount private /tmp
Diffstat (limited to 'nixos')
| -rw-r--r-- | nixos/modules/services/printing/cupsd.nix | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/nixos/modules/services/printing/cupsd.nix b/nixos/modules/services/printing/cupsd.nix index 7ce2ae38fb36..ba9f99e6a8fb 100644 --- a/nixos/modules/services/printing/cupsd.nix +++ b/nixos/modules/services/printing/cupsd.nix @@ -324,6 +324,8 @@ in fi ''} ''; + + serviceConfig.PrivateTmp = true; }; systemd.services.cups-browsed = mkIf avahiEnabled |