systemd changes for 13805 as recommened by Tomasz on that ticket.

This commit is contained in:
Nick Mathewson 2015-01-11 11:26:08 -05:00
parent c98e075ebc
commit 96a407a243

View File

@ -22,8 +22,9 @@ ProtectSystem = full
ReadOnlyDirectories = / ReadOnlyDirectories = /
ReadWriteDirectories = -@LOCALSTATEDIR@/lib/tor ReadWriteDirectories = -@LOCALSTATEDIR@/lib/tor
ReadWriteDirectories = -@LOCALSTATEDIR@/log/tor ReadWriteDirectories = -@LOCALSTATEDIR@/log/tor
ReadWriteDirectories = -@LOCALSTATEDIR@/run/tor
NoNewPrivileges = yes NoNewPrivileges = yes
ReadWriteDirectories = -@LOCALSTATEDIR@/run/tor
CapabilityBoundingSet = CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE
[Install] [Install]
WantedBy = multi-user.target WantedBy = multi-user.target