diff options
Diffstat (limited to 'modules/services/snapclient.nix')
| -rw-r--r-- | modules/services/snapclient.nix | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/modules/services/snapclient.nix b/modules/services/snapclient.nix index 4fdf266..9f93131 100644 --- a/modules/services/snapclient.nix +++ b/modules/services/snapclient.nix @@ -32,6 +32,7 @@ in { Group = "audio"; ExecStart = "${pkgs.snapcast}/bin/snapclient --hostID ${escapeShellArg cfg.hostID}"; NoNewPrivileges = true; + ProtectHome = true; ProtectKernelTunables = true; ProtectControlGroups = true; ProtectKernelModules = true; |