config(modules/baseServiceConfig): Revert ProcSubset=pid (default is …

…all) `ProcSubset=pid` causes various problems for both nimbus and geth (and possibly other services), so it's better to revert that change.
metacraft-labs · Jan 18, 2024 · c44d87e · c44d87e
1 parent 6381f10
commit c44d87e
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 2 deletions.
diff --git a/modules/geth/default.nix b/modules/geth/default.nix
@@ -121,7 +121,6 @@ in {
               serviceConfig = mkMerge [
                 baseServiceConfig
                 {
-                  ProcSubset = "all";
                   User = serviceName;
                   StateDirectory = serviceName;
                   ExecStart = "${cfg.package}/bin/geth ${scriptArgs}";

diff --git a/modules/lib.nix b/modules/lib.nix
@@ -81,7 +81,6 @@ lib: let
     #   * ProtectHome = "read-only"
     DynamicUser = mkDefault true;
 
-    ProcSubset = mkDefault "pid";
     ProtectClock = mkDefault true;
     ProtectProc = mkDefault "noaccess";
     ProtectKernelLogs = mkDefault true;