summaryrefslogtreecommitdiffstats
path: root/systemd
diff options
context:
space:
mode:
Diffstat (limited to 'systemd')
-rw-r--r--systemd/pacdbserve.service4
-rw-r--r--systemd/pacredir.service4
-rw-r--r--systemd/pacserve.service4
3 files changed, 12 insertions, 0 deletions
diff --git a/systemd/pacdbserve.service b/systemd/pacdbserve.service
index aebd368..fcde113 100644
--- a/systemd/pacdbserve.service
+++ b/systemd/pacdbserve.service
@@ -6,6 +6,10 @@ After=network.target
User=nobody
Group=nobody
ExecStart=/usr/bin/darkhttpd /var/lib/pacman/sync/ --port 7079
+ProtectSystem=full
+ProtectHome=on
+PrivateDevices=on
+NoNewPrivileges=on
[Install]
WantedBy=multi-user.target
diff --git a/systemd/pacredir.service b/systemd/pacredir.service
index adb9087..2fa1328 100644
--- a/systemd/pacredir.service
+++ b/systemd/pacredir.service
@@ -7,6 +7,10 @@ After=avahi-daemon.service
User=nobody
Group=nobody
ExecStart=/usr/bin/pacredir
+ProtectSystem=full
+ProtectHome=on
+PrivateDevices=on
+NoNewPrivileges=on
[Install]
WantedBy=multi-user.target
diff --git a/systemd/pacserve.service b/systemd/pacserve.service
index 74db6ef..6ec4aab 100644
--- a/systemd/pacserve.service
+++ b/systemd/pacserve.service
@@ -6,6 +6,10 @@ After=network.target
User=nobody
Group=nobody
ExecStart=/usr/bin/darkhttpd /var/cache/pacman/pkg/ --port 7078
+ProtectSystem=full
+ProtectHome=on
+PrivateDevices=on
+NoNewPrivileges=on
[Install]
WantedBy=multi-user.target