nixos/openconnect: add hardening flags

2 years ago · e4c93fb04c
parent 0c066f0d0e
commit e4c93fb04c
1 changed files with 2 additions and 0 deletions
--- a/nixos/modules/services/networking/openconnect.nix
+++ b/nixos/modules/services/networking/openconnect.nix
@ -103,6 +103,8 @@ let
          generateConfig name icfg
        } ${icfg.gateway}";
      StandardInput = "file:${icfg.passwordFile}";
+
+      ProtectHome = true;
    };
  };
 in {