From 2f8ca8337633a199aae9b4cdd71c66ed1c9529a5 Mon Sep 17 00:00:00 2001
From: Ophestra <cat@gensokyo.uk>
Date: Sat, 27 Dec 2025 09:17:14 +0900
Subject: cmd/sharefs: containerise filesystem daemon

This replaces the forking daemonise libfuse function which prevents Go callbacks from calling into the runtime. This also enforces least privilege on the daemon process.

Signed-off-by: Ophestra <cat@gensokyo.uk>
---
 nixos.nix | 1 -
 1 file changed, 1 deletion(-)

(limited to 'nixos.nix')

diff --git a/nixos.nix b/nixos.nix
index 215b7901..cccc1810 100644
--- a/nixos.nix
+++ b/nixos.nix
@@ -88,7 +88,6 @@ in
                 "noatime"
                 "auto_unmount"
                 "allow_other"
-                "clone_fd"
                 "setuid=$(id -u ${cfg.sharefs.user})"
                 "setgid=$(id -g ${cfg.sharefs.group})"
                 "source=${cfg.sharefs.source}"
-- 
cgit v1.3.1