wo2w/nixos-config
1
0
Fork 0
Code Issues Pull requests Activity

velocity: DevicePolicy strict -> closed

Browse source 
this worked previously on the container because its a container and /dev/* access is managed by proxmox, but it doesnt work now because it blocks access to devices including /dev/null which is used for stdin by default
This commit is contained in:
wo2wz 2025-12-21 16:23:11 -05:00
parent f338602ae3
commit 718dcae809
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
modules/nixos/services/gameserver/velocity.nix
View file

@ -134,7 +134,7 @@
# hardening
CapabilityBoundingSet = [ "" ];
DeviceAllow = [ "" ];
DevicePolicy = "strict";
DevicePolicy = "closed";
LockPersonality = true;
NoNewPrivileges = true;
PrivateDevices = true;