13 lines
194 B
Nix
13 lines
194 B
Nix
{
|
|
defaultHardening = {
|
|
PrivateTmp = "true";
|
|
ProtectSystem = "full";
|
|
NoNewPrivileges = "true";
|
|
PrivateDevices = "true";
|
|
MemoryDenyWriteExecute = "true";
|
|
};
|
|
}
|
|
|
|
|
|
|