diff options
| author | Martin Weinelt <mweinelt@users.noreply.github.com> | 2021-05-06 18:05:00 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-05-06 18:05:00 +0200 |
| commit | 6a09bc4405c68627b043799bf0256cba1dc57a1b (patch) | |
| tree | 72fa94b22d81547310892e89c3c096be9daeb0e2 /nixos | |
| parent | 51836ac425919526d9777e709572d21c45c555e7 (diff) | |
| parent | 398b0cf6bd987039438daaf923a6b4907c8086a5 (diff) | |
| download | nixlib-6a09bc4405c68627b043799bf0256cba1dc57a1b.tar nixlib-6a09bc4405c68627b043799bf0256cba1dc57a1b.tar.gz nixlib-6a09bc4405c68627b043799bf0256cba1dc57a1b.tar.bz2 nixlib-6a09bc4405c68627b043799bf0256cba1dc57a1b.tar.lz nixlib-6a09bc4405c68627b043799bf0256cba1dc57a1b.tar.xz nixlib-6a09bc4405c68627b043799bf0256cba1dc57a1b.tar.zst nixlib-6a09bc4405c68627b043799bf0256cba1dc57a1b.zip | |
Merge pull request #121865 from mweinelt/home-assistant
Diffstat (limited to 'nixos')
| -rw-r--r-- | nixos/modules/services/misc/home-assistant.nix | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/nixos/modules/services/misc/home-assistant.nix b/nixos/modules/services/misc/home-assistant.nix index 1985f1308811..1e33381de24c 100644 --- a/nixos/modules/services/misc/home-assistant.nix +++ b/nixos/modules/services/misc/home-assistant.nix @@ -298,7 +298,7 @@ in { ProtectKernelModules = true; ProtectKernelTunables = true; ProtectProc = "invisible"; - ProcSubset = "pid"; + ProcSubset = "all"; ProtectSystem = "strict"; RemoveIPC = true; ReadWritePaths = let @@ -308,9 +308,10 @@ in { allowPaths = if isList value then value else singleton value; in [ "${cfg.configDir}" ] ++ allowPaths; RestrictAddressFamilies = [ - "AF_UNIX" "AF_INET" "AF_INET6" + "AF_NETLINK" + "AF_UNIX" ] ++ optionals (useComponent "bluetooth_tracker" || useComponent "bluetooth_le_tracker") [ "AF_BLUETOOTH" ]; |