diff options
| author | Alexandre Macabies <web+oss@zopieux.com> | 2021-10-16 01:57:50 +0200 |
|---|---|---|
| committer | Alexandre Macabies <web+oss@zopieux.com> | 2021-10-16 01:57:50 +0200 |
| commit | 7fb3edb0773dd4f919a989001065fc527acc6b38 (patch) | |
| tree | beec6d5aa40a361103adb17864e33a1bc1783e89 /pkgs/development/python-modules/rangehttpserver | |
| parent | 0281ba6ace51fbf468aed8286f8c619ed25b5f01 (diff) | |
nixos/prometheus-rtl_433-exporter: fix systemd hardening
9fea6d4c8551b7c8783f23e011a2ba113c95d0dd broke rtl_433-exporter by
introducing several hardening options which do not play well with
rtl_433 requiring writing to USB. More precisely, rtl_433 requires
(a) AF_NETLINK to configure the radio; (b) access to the USB device,
but PrivateDevices=true hides them; (c) rw access to the USB device,
but DeviceAllow= block-lists everything.
This commit was tested on real hardware with a standard NixOS setup.
Diffstat (limited to 'pkgs/development/python-modules/rangehttpserver')
0 files changed, 0 insertions, 0 deletions