diff --git a/hosts/nuos/configuration.nix b/hosts/nuos/configuration.nix index 48b05ca..bf83215 100644 --- a/hosts/nuos/configuration.nix +++ b/hosts/nuos/configuration.nix @@ -185,15 +185,15 @@ in User = "disqalculate"; NoNewPrivileges = true; ProtectHome = true; - ProtectProc = true; + ProtectProc = "noaccess"; + ProcSubset = "pid"; ProtectClock = true; ProtectKernelLogs = true; ProtectSystem = true; PrivateTmp = true; PrivateDevices = true; ProtectKernelTunables = true; - CapabylityBoundingSet = true; - RestrictNamspaces = ""; + RestrictNamespaces = ""; CapabilityBoundingSet = ""; EnvironmentFile = config.age.secrets."discord/disqalculate".path; BindReadOnlyPaths = [