Use ProtectHome instead of InaccessibleDirectories

See 13805
This commit is contained in:
Craig Andrews 2014-11-28 12:36:56 -05:00
parent 1ac3b74405
commit 9c933b3635

View File

@ -17,7 +17,7 @@ LimitNOFILE = 32768
# Hardening
PrivateTmp = yes
PrivateDevices = yes
InaccessibleDirectories = /home
ProtectHome = yes
ReadOnlyDirectories = /
ReadWriteDirectories = @LOCALSTATEDIR@/lib/tor
ReadWriteDirectories = @LOCALSTATEDIR@/log/tor