mirror of
https://github.com/azlux/log2ram.git
synced 2023-10-10 13:37:24 +02:00
Update log2ram.service
This commit is contained in:
parent
7f2f8d20db
commit
c7aef205b1
@ -15,13 +15,13 @@ ExecReload= /usr/local/bin/log2ram write
|
|||||||
TimeoutStartSec=120
|
TimeoutStartSec=120
|
||||||
RemainAfterExit=yes
|
RemainAfterExit=yes
|
||||||
|
|
||||||
#SANDBOXING# -- partly tested
|
# SANDBOXING
|
||||||
LockPersonality=true
|
LockPersonality=true
|
||||||
MemoryDenyWriteExecute=true
|
MemoryDenyWriteExecute=true
|
||||||
NoNewPriviliges=true
|
NoNewPriviliges=true
|
||||||
PrivateDevices=true
|
PrivateDevices=true
|
||||||
PrivateNetwork=true
|
PrivateNetwork=true
|
||||||
#Will likely break "MAIL" in log2ram.config if does not point to localhost / disabled
|
#Will likely break "MAIL" in log2ram.config if does not point to localhost or is unused.
|
||||||
ProtectClock=true
|
ProtectClock=true
|
||||||
ProtectControlGroups=true
|
ProtectControlGroups=true
|
||||||
ProtectHostname=true
|
ProtectHostname=true
|
||||||
@ -35,8 +35,5 @@ ProtectHome=true
|
|||||||
#will likely break situations wherein configured to also copy logs from $HOME.
|
#will likely break situations wherein configured to also copy logs from $HOME.
|
||||||
#can probably fix with systemctl edit to whitelist relevant dirs
|
#can probably fix with systemctl edit to whitelist relevant dirs
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
[Install]
|
[Install]
|
||||||
WantedBy=sysinit.target
|
WantedBy=sysinit.target
|
||||||
|
Loading…
Reference in New Issue
Block a user