1
0
mirror of https://git.burble.com/burble.dn42/lgregmapper.git synced 2024-05-12 03:55:05 +00:00

Harden systemd unit file

This commit is contained in:
Simon Marsh
2019-03-06 19:22:10 +00:00
parent f945ec7913
commit 46e83bcb68

View File

@ -14,6 +14,16 @@ User=lglass
Group=lglass
Type=simple
Restart=on-failure
# service hardening
ProtectSystem=strict
NoNewPrivileges=yes
ProtectControlGroups=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
MemoryDenyWriteExecute=yes
ProtectHome=true
#
ExecStart=/opt/lgregmapper/lgregmapper -b ":11211"
#########################################################################