mirror of
https://github.com/PurpleI2P/i2pd.git
synced 2025-08-26 10:10:24 +01:00
Update i2pd.service
Hardening for i2pd.service
This commit is contained in:
parent
2a48d58549
commit
1a36152123
1 changed files with 15 additions and 0 deletions
|
@ -34,5 +34,20 @@ LimitNOFILE=8192
|
|||
# To enable write of coredump uncomment this
|
||||
#LimitCORE=infinity
|
||||
|
||||
#hardening
|
||||
ProtectHostname=true
|
||||
ProtectKernelLogs=true
|
||||
ProtectControlGroups=true
|
||||
ProtectKernelModules=true
|
||||
ProtectKernelTunables=true
|
||||
ProtectProc=invisible
|
||||
ProcSubset=pid
|
||||
PrivateTmp=true
|
||||
PrivateUsers=true
|
||||
PrivateDevices=true
|
||||
PrivateIPC=true
|
||||
NoNewPrivileges=true
|
||||
RestrictNamespaces=true
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue