From 66c93601355b118d9124828a5128a91d33c7bb54 Mon Sep 17 00:00:00 2001
From: gwg313 <gwg313@pm.me>
Date: Fri, 17 Apr 2026 23:49:23 -0400
Subject: [PATCH] remove MemoryDenyWriteExecute from nix-daemon

Some home manager modules requiring luajit wont compile with this
enabled
---
 .../features/security/systemd/security-systemd-nix-daemon.nix   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/features/security/systemd/security-systemd-nix-daemon.nix b/modules/features/security/systemd/security-systemd-nix-daemon.nix
index b1e1323..9965d29 100644
--- a/modules/features/security/systemd/security-systemd-nix-daemon.nix
+++ b/modules/features/security/systemd/security-systemd-nix-daemon.nix
@@ -57,7 +57,7 @@
               "~@raw-io"
             ];
             LockPersonality = true;
-            MemoryDenyWriteExecute = true;
+            # MemoryDenyWriteExecute = true;
             DevicePolicy = "closed";
             UMask = 0077;
           };