mirror of
https://github.com/SebastianWendel/nixpkgs.git
synced 2024-09-20 04:19:00 +02:00
nixos/pretix: Fix pdf generation
Previously, pdftk (part of the ticket, badge, ... generation pipeline) would fail with: ``` Error occurred during initialization of VM Failed to mark memory page as executable - check if grsecurity/PaX is enabled ``` Thise caused pdf generation to fail. Since pdftk is a java application and, according to systemd.exec(5), > Note that [MemoryDenyWriteExecute=] is incompatible with programs and > libraries that generate program code dynamically at runtime, including > JIT execution engines, executable stacks, and code "trampoline" featu > re of various C compilers. Disabling `MemoryDenyWriteExecute=` fixes it.
This commit is contained in:
parent
c08b185484
commit
6d5a6cab71
|
@ -479,7 +479,7 @@ in
|
||||||
CapabilityBoundingSet = [ "" ];
|
CapabilityBoundingSet = [ "" ];
|
||||||
DevicePolicy = "closed";
|
DevicePolicy = "closed";
|
||||||
LockPersonality = true;
|
LockPersonality = true;
|
||||||
MemoryDenyWriteExecute = true;
|
MemoryDenyWriteExecute = false; # required by pdftk
|
||||||
NoNewPrivileges = true;
|
NoNewPrivileges = true;
|
||||||
PrivateDevices = true;
|
PrivateDevices = true;
|
||||||
PrivateTmp = true;
|
PrivateTmp = true;
|
||||||
|
|
Loading…
Reference in a new issue