diff options
| author | Eelco Dolstra <eelco.dolstra@logicblox.com> | 2016-07-28 17:39:14 +0200 |
|---|---|---|
| committer | Eelco Dolstra <eelco.dolstra@logicblox.com> | 2016-07-28 17:58:55 +0200 |
| commit | fd5bbdb4363cbd2935b0d5a37c4e7355f45e61a4 (patch) | |
| tree | b64114d7bed5b1e26daedcafce68ca08a4af8c90 /pkgs/development/python-modules/python-mapnik | |
| parent | bf3edfbb3c75bc9cd640871fb4e0e9107dafaea1 (diff) | |
nixos-containers: Set DevicePolicy=closed
This makes the container a bit more secure, by preventing root
creating device nodes to access the host file system, for
instance. (Reference: systemd-nspawn@.service in systemd.)
Diffstat (limited to 'pkgs/development/python-modules/python-mapnik')
0 files changed, 0 insertions, 0 deletions