diff options
| author | ajs124 <git@ajs124.de> | 2022-05-30 11:57:10 +0200 |
|---|---|---|
| committer | github-actions[bot] <github-actions[bot]@users.noreply.github.com> | 2022-05-30 11:39:47 +0000 |
| commit | 70fda42f22f4cf15920fc7772a461dd6923f718d (patch) | |
| tree | 91d279c2ac4ee2d773c77bc7d51b837376d6da0c | |
| parent | nginxQuic: update (diff) | |
| download | nixpkgs-origin/backport-174448-to-release-22.05.tar.gz | |
nixos/nginx: fix SystemCallFilter for openrestyorigin/backport-174448-to-release-22.05
(cherry picked from commit 30186896ee517990e51c5256b589c0224c971670)
| -rw-r--r-- | nixos/modules/services/web-servers/nginx/default.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/services/web-servers/nginx/default.nix b/nixos/modules/services/web-servers/nginx/default.nix index 0c2333399e81..160d76597c88 100644 --- a/nixos/modules/services/web-servers/nginx/default.nix +++ b/nixos/modules/services/web-servers/nginx/default.nix @@ -932,7 +932,7 @@ in # System Call Filtering SystemCallArchitectures = "native"; SystemCallFilter = [ "~@cpu-emulation @debug @keyring @mount @obsolete @privileged @setuid" ] - ++ optionals ((cfg.package != pkgs.tengine) && (!lib.any (mod: (mod.disableIPC or false)) cfg.package.modules)) [ "~@ipc" ]; + ++ optionals ((cfg.package != pkgs.tengine) && (cfg.package != pkgs.openresty) && (!lib.any (mod: (mod.disableIPC or false)) cfg.package.modules)) [ "~@ipc" ]; }; }; |