diff options
| author | Erik Arvstedt <erik.arvstedt@gmail.com> | 2022-01-31 15:07:05 +0100 |
|---|---|---|
| committer | Jonathan Ringer <jonringer@users.noreply.github.com> | 2022-02-08 09:52:12 -0800 |
| commit | 937c428faa06d09a9528fefc279305784fb85db3 (patch) | |
| tree | 161997fd6476961a8e10daa144ded00435e09942 | |
| parent | nixos/documentation: add placeholder option meta.buildDocsInSandbox for backw... (diff) | |
| download | nixpkgs-937c428faa06d09a9528fefc279305784fb85db3.tar.gz | |
nixos/nginx: remove @mincore from SystemCallFilter
cherry picked from commit 26ea046ed7e26e20275d028688e7ed6408bd8d43
See: https://github.com/NixOS/nixpkgs/pull/148695
| -rw-r--r-- | nixos/modules/services/web-servers/nginx/default.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/services/web-servers/nginx/default.nix b/nixos/modules/services/web-servers/nginx/default.nix index 6416400ce431..3c927246b2c4 100644 --- a/nixos/modules/services/web-servers/nginx/default.nix +++ b/nixos/modules/services/web-servers/nginx/default.nix @@ -907,7 +907,7 @@ in PrivateMounts = true; # System Call Filtering SystemCallArchitectures = "native"; - SystemCallFilter = "~@cpu-emulation @debug @keyring @ipc @mount @obsolete @privileged @setuid @mincore"; + SystemCallFilter = "~@cpu-emulation @debug @keyring @ipc @mount @obsolete @privileged @setuid"; }; }; |