Commit 1ebacf2a4d1b
Changed files (1)
systems
common
hardware
systems/common/hardware/acpid.nix
@@ -2,15 +2,4 @@ _: {
services.acpid = {
enable = true;
};
- systemd.services.acpid.serviceConfig = {
- ProtectSystem = "full";
- ProtectHome = true;
- RestrictAddressFamilies = [
- "AF_INET"
- "AF_INET6"
- ];
- SystemCallFilter = "~@clock @cpu-emulation @debug @module @mount @raw-io @reboot @swap";
- ProtectKernelTunables = true;
- ProtectKernelModules = true;
- };
}