Skip to content
GitLab
Verified Commit 10c40f72 authored by Jelle van der Waa's avatar Jelle van der Waa 🚧
Browse files

Apply some hardening to cleanup.service

parent 14fbcdaf
Hide whitespace changes
Inline Side-by-side
roles/dbscripts/files/cleanup.service
View file @ 10c40f72
......@@ -4,9 +4,14 @@ Description=Cleanup
[Service]
Type=oneshot
User=cleanup
ExecStart=/usr/bin/bash -c '/srv/repos/svn-community/dbscripts/cron-jobs/ftpdir-cleanup'
ExecStart=/usr/bin/bash -c '/srv/repos/svn-packages/dbscripts/cron-jobs/ftpdir-cleanup'
ExecStart=/srv/repos/svn-community/dbscripts/cron-jobs/ftpdir-cleanup
ExecStart=/srv/repos/svn-packages/dbscripts/cron-jobs/ftpdir-cleanup
CapabilityBoundingSet=
PrivateDevices=true
PrivateNetwork=true
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ReadWritePaths=/srv/ftp/ /srv/repos/svn-community /srv/repos/svn-packages
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment