Commit 1ebacf2a4d1b

Vincent Demeester <vincent@sbr.pm>
2025-07-23 10:49:16
Remove acpid.serviceConfig for now...
Signed-off-by: Vincent Demeester <vincent@sbr.pm>
1 parent 3181490
Changed files (1)
systems
common
hardware
systems/common/hardware/acpid.nix
@@ -2,15 +2,4 @@ _: {
   services.acpid = {
     enable = true;
   };
-  systemd.services.acpid.serviceConfig = {
-    ProtectSystem = "full";
-    ProtectHome = true;
-    RestrictAddressFamilies = [
-      "AF_INET"
-      "AF_INET6"
-    ];
-    SystemCallFilter = "~@clock @cpu-emulation @debug @module @mount @raw-io @reboot @swap";
-    ProtectKernelTunables = true;
-    ProtectKernelModules = true;
-  };
 }