vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: remove tracker tag from source comment (lint)

Browse source
This commit is contained in:
atlas 2026-07-04 11:39:56 +02:00 • committed by mara
commit ef2b3a735c
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
nix/modules/hive-c0re.nix
View file

@ -1100,7 +1100,7 @@ in
# These directives deny the subset of kernel capabilities it
# provably doesn't need without restricting its network or
# filesystem access (ProtectSystem / RestrictAddressFamilies are
# deferred to a follow-up with a watched deploy — see #1845).
# deferred to a follow-up with a watched deploy.
NoNewPrivileges = true; # already runs as unprivileged user
PrivateTmp = true; # hive-c0re and its nix subprocesses use tmpfiles under StateDirectory, not /tmp
ProtectHome = true; # HOME = /var/lib/hyperhive (StateDirectory); no /home/* access needed