mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2024-11-27 13:53:31 +01:00
Merge remote-tracking branch 'intrigeri/bug12939-systemd-no-new-privileges'
Conflicts: contrib/dist/tor.service.in
This commit is contained in:
commit
54348201f7
4
changes/bug12939-systemd-no-new-privileges
Normal file
4
changes/bug12939-systemd-no-new-privileges
Normal file
@ -0,0 +1,4 @@
|
||||
o Distribution:
|
||||
- systemd unit file: ensures that the process and all its children
|
||||
can never gain new privileges.
|
||||
Patch by intrigeri; resolves ticket 12939.
|
1
contrib/dist/tor.service.in
vendored
1
contrib/dist/tor.service.in
vendored
@ -22,6 +22,7 @@ InaccessibleDirectories = /home
|
||||
ReadOnlyDirectories = /
|
||||
ReadWriteDirectories = @LOCALSTATEDIR@/lib/tor
|
||||
ReadWriteDirectories = @LOCALSTATEDIR@/log/tor
|
||||
NoNewPrivileges = yes
|
||||
|
||||
[Install]
|
||||
WantedBy = multi-user.target
|
||||
|
Loading…
Reference in New Issue
Block a user