systemd unit file: ensures that the process and all its children can never gain

new privileges (#12939).
This commit is contained in:
intrigeri 2014-08-27 03:18:26 +00:00
parent b159ffb675
commit b4170421cc

View File

@ -19,6 +19,7 @@ PrivateTmp = yes
DeviceAllow = /dev/null rw DeviceAllow = /dev/null rw
DeviceAllow = /dev/urandom r DeviceAllow = /dev/urandom r
InaccessibleDirectories = /home InaccessibleDirectories = /home
NoNewPrivileges = yes
[Install] [Install]
WantedBy = multi-user.target WantedBy = multi-user.target