From e94bd6f31dc6b551b28b479a992564d837e28b95 Mon Sep 17 00:00:00 2001
From: Joachim Fasting <joachifm@fastmail.fm>
Date: Tue, 25 Oct 2016 19:52:58 +0200
Subject: cjdns service: protect /home and /tmp

---
 nixos/modules/services/networking/cjdns.nix | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'nixos/modules')

diff --git a/nixos/modules/services/networking/cjdns.nix b/nixos/modules/services/networking/cjdns.nix
index c0955811e548..64d9ec215e40 100644
--- a/nixos/modules/services/networking/cjdns.nix
+++ b/nixos/modules/services/networking/cjdns.nix
@@ -248,6 +248,9 @@ in
       serviceConfig = {
         Type = "forking";
         Restart = "on-failure";
+
+        ProtectHome = true;
+        PrivateTmp = true;
       };
     };
 
-- 
cgit v1.2.3