1
0
mirror of https://github.com/azlux/log2ram.git synced 2023-10-10 13:37:24 +02:00

Update log2ram-daily.service

This commit is contained in:
TubbyCat 2022-08-25 16:28:09 -04:00 committed by GitHub
parent 69bc7a5cbe
commit 7f2f8d20db
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -5,4 +5,19 @@ After=log2ram.service
[Service]
ExecStart=/bin/systemctl reload log2ram.service
## insert sandboxing here ##
# Sandboxing
LockPersonality=true
MemoryDenyWriteExecute=true
NoNewPriviliges=true
PrivateDevices=true
PrivateNetwork=true
#May affect "Mail" in log2ram.conf.
ProtectClock=true
ProtectControlGroups=true
ProtectHostname=true
ProtectKernelLogs=true
ProtectKernelModules=true
ProtectKernelTunables=true
RestrictSUIDSGID=true
ProtectSystem=strict
ProtectHome=true