From 20fe29aaf9f64850e21b1c0ced95278c7a4a4329 Mon Sep 17 00:00:00 2001 From: Christian Hesse Date: Sat, 27 Jun 2015 21:43:26 +0200 Subject: add some extra security to systemd units --- systemd/pacredir.service | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'systemd/pacredir.service') diff --git a/systemd/pacredir.service b/systemd/pacredir.service index adb9087..2fa1328 100644 --- a/systemd/pacredir.service +++ b/systemd/pacredir.service @@ -7,6 +7,10 @@ After=avahi-daemon.service User=nobody Group=nobody ExecStart=/usr/bin/pacredir +ProtectSystem=full +ProtectHome=on +PrivateDevices=on +NoNewPrivileges=on [Install] WantedBy=multi-user.target -- cgit v1.2.3-70-g09d2