nihilist/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-11-27 22:03:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'intrigeri/bug12939-systemd-no-new-privileges'

Browse Source 
Conflicts:
	contrib/dist/tor.service.in
This commit is contained in:
Nick Mathewson 2014-09-03 13:29:43 -04:00
commit 54348201f7
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
changes/bug12939-systemd-no-new-privileges Normal file
View File

@ -0,0 +1,4 @@
o Distribution:
- systemd unit file: ensures that the process and all its children
can never gain new privileges.
Patch by intrigeri; resolves ticket 12939.

1
contrib/dist/tor.service.in vendored
View File

@ -22,6 +22,7 @@ InaccessibleDirectories = /home
ReadOnlyDirectories = /
ReadWriteDirectories = @LOCALSTATEDIR@/lib/tor
ReadWriteDirectories = @LOCALSTATEDIR@/log/tor
NoNewPrivileges = yes
[Install]
WantedBy = multi-user.target