upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-30 03:19:35 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

unbound.service.in: upgrade hardening to latest standards

Browse source 
Systemd gradually introduced new protection bits, let’s enable them.
This commit is contained in:
Bruno Pagani 2021-07-25 03:17:18 +00:00
parent ca5baef433
commit c32b9e4ba9
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
contrib/unbound.service.in
View file

@ -60,8 +60,12 @@ NoNewPrivileges=true
PrivateDevices=true
PrivateTmp=true
ProtectHome=true
ProtectClock=true
ProtectControlGroups=true
ProtectKernelLogs=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectProc=invisible
ProtectSystem=strict
RuntimeDirectory=unbound
ConfigurationDirectory=unbound