Skip to content
GitLab
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Menu
Open sidebar
Arch Linux
infrastructure
Commits
10c40f72
Verified
Commit
10c40f72
authored
Jul 03, 2020
by
Jelle van der Waa
🚧
Browse files
Apply some hardening to cleanup.service
parent
14fbcdaf
Changes
1
Hide whitespace changes
Inline
Side-by-side
roles/dbscripts/files/cleanup.service
View file @
10c40f72
...
...
@@ -4,9 +4,14 @@ Description=Cleanup
[Service]
Type
=
oneshot
User
=
cleanup
ExecStart
=
/
usr/bin/bash -c '/
srv/repos/svn-community/dbscripts/cron-jobs/ftpdir-cleanup
'
ExecStart
=
/
usr/bin/bash -c '/
srv/repos/svn-packages/dbscripts/cron-jobs/ftpdir-cleanup
'
ExecStart
=
/srv/repos/svn-community/dbscripts/cron-jobs/ftpdir-cleanup
ExecStart
=
/srv/repos/svn-packages/dbscripts/cron-jobs/ftpdir-cleanup
CapabilityBoundingSet
=
PrivateDevices
=
true
PrivateNetwork
=
true
NoNewPrivileges
=
true
ProtectSystem
=
strict
ProtectHome
=
true
PrivateTmp
=
true
ReadWritePaths
=
/srv/ftp/ /srv/repos/svn-community /srv/repos/svn-packages
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment