Merge remote-tracking branch 'candrews/issue13805'

This commit is contained in:
Nick Mathewson 2015-01-11 11:24:48 -05:00
commit c98e075ebc

View File

@ -16,13 +16,13 @@ LimitNOFILE = 32768
# Hardening
PrivateTmp = yes
DeviceAllow = /dev/null rw
DeviceAllow = /dev/urandom r
InaccessibleDirectories = /home
PrivateDevices = yes
ProtectHome = yes
ProtectSystem = full
ReadOnlyDirectories = /
ReadWriteDirectories = @LOCALSTATEDIR@/lib/tor
ReadWriteDirectories = @LOCALSTATEDIR@/log/tor
ReadWriteDirectories = @LOCALSTATEDIR@/run/tor
ReadWriteDirectories = -@LOCALSTATEDIR@/lib/tor
ReadWriteDirectories = -@LOCALSTATEDIR@/log/tor
ReadWriteDirectories = -@LOCALSTATEDIR@/run/tor
NoNewPrivileges = yes
[Install]