Damus
Open in Damus
Klaus Frank profile picture
Klaus Frank
@Klaus Frank
What's the general opinion of the #Nix community on hardening systemd services? Aka. adding isolation and restriction properties?

Is there a reason it is currently not that commonly done? Would PRs in that regard be appreciated or would it just be dismissed?

#systemd #NixOS
1
Yann Büchau :nixos: · 3w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqum3rezpjzv76kzeyawsf5plw8fp7l9gysd34gdncvxyfm0qhu5ws0zulnl For sure they'd be accepted. Many important services are hardened, the ones that don't I guess the maintainer didn't bother, but if you add sensible options, yeah go for it.