diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-12-27 09:17:14 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-12-27 10:16:35 +0900 |
| commit | 2f8ca8337633a199aae9b4cdd71c66ed1c9529a5 (patch) | |
| tree | de6f37118e8ba7da80ac20a663478375a81c1be3 /nixos.nix | |
| parent | 3d720ada922def503977d6972aa953ffe924e714 (diff) | |
cmd/sharefs: containerise filesystem daemon
This replaces the forking daemonise libfuse function which prevents Go callbacks from calling into the runtime. This also enforces least privilege on the daemon process.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'nixos.nix')
| -rw-r--r-- | nixos.nix | 1 |
1 files changed, 0 insertions, 1 deletions
@@ -88,7 +88,6 @@ in "noatime" "auto_unmount" "allow_other" - "clone_fd" "setuid=$(id -u ${cfg.sharefs.user})" "setgid=$(id -g ${cfg.sharefs.group})" "source=${cfg.sharefs.source}" |