config(modules/nethermind): Set MemoryDenyWriteExecute to false

MartinNikov · MartinNikov · commit a645c39c405f · 2024-03-12T13:53:54.000+02:00
diff --git a/modules/nethermind/default.nix b/modules/nethermind/default.nix
@@ -137,6 +137,8 @@ in {
                   User = serviceName;
                   StateDirectory = serviceName;
                   ExecStart = "${cfg.package}/bin/nethermind ${scriptArgs}";
+
+                  MemoryDenyWriteExecute = false;
                 }
                 (mkIf (cfg.args.modules.JsonRpc.JwtSecretFile != null) {
                   LoadCredential = ["jwtsecret:${cfg.args.modules.JsonRpc.JwtSecretFile}"];

Original file line number	Diff line number	Diff line change
`@@ -137,6 +137,8 @@ in {`
`137`	`137`	`User = serviceName;`
`138`	`138`	`StateDirectory = serviceName;`
`139`	`139`	`ExecStart = "${cfg.package}/bin/nethermind ${scriptArgs}";`
	`140`	`+`
	`141`	`+ MemoryDenyWriteExecute = false;`
`140`	`142`	`}`
`141`	`143`	`(mkIf (cfg.args.modules.JsonRpc.JwtSecretFile != null) {`
`142`	`144`	`LoadCredential = ["jwtsecret:${cfg.args.modules.JsonRpc.JwtSecretFile}"];`