mirror of
https://github.com/azlux/log2ram.git
synced 2023-10-10 13:37:24 +02:00
Update log2ram-daily.service
This commit is contained in:
parent
69bc7a5cbe
commit
7f2f8d20db
@ -5,4 +5,19 @@ After=log2ram.service
|
||||
[Service]
|
||||
ExecStart=/bin/systemctl reload log2ram.service
|
||||
|
||||
## insert sandboxing here ##
|
||||
# Sandboxing
|
||||
LockPersonality=true
|
||||
MemoryDenyWriteExecute=true
|
||||
NoNewPriviliges=true
|
||||
PrivateDevices=true
|
||||
PrivateNetwork=true
|
||||
#May affect "Mail" in log2ram.conf.
|
||||
ProtectClock=true
|
||||
ProtectControlGroups=true
|
||||
ProtectHostname=true
|
||||
ProtectKernelLogs=true
|
||||
ProtectKernelModules=true
|
||||
ProtectKernelTunables=true
|
||||
RestrictSUIDSGID=true
|
||||
ProtectSystem=strict
|
||||
ProtectHome=true
|
||||
|
Loading…
Reference in New Issue
Block a user