Skip to content
GitLab
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Menu
Open sidebar
Arch Linux
infrastructure
Commits
8855cd05
Verified
Commit
8855cd05
authored
Jun 30, 2020
by
Morten Linderud
🏄
Committed by
Jelle van der Waa
Jul 11, 2020
Browse files
Service hardening
Signed-off-by:
Morten Linderud
<
morten@linderud.pw
>
parent
640b56bc
Changes
1
Hide whitespace changes
Inline
Side-by-side
roles/bugbot/files/bugbot.service
View file @
8855cd05
...
...
@@ -5,8 +5,14 @@ Description=The official Arch Linux IRC bugbot
EnvironmentFile
=
/srv/bugbot/env
ExecStart
=
/srv/bugbot/bugbot.py
Restart
=
on-failure
ProtectSystem
=
full
ProtectSystem
=
strict
DynamicUser
=
yes
PrivateDevices
=
true
ProtectKernelTunables
=
true
ProtectControlGroups
=
true
MemoryDenyWriteExecute
=
true
NoNewPrivileges
=
true
[Install]
WantedBy
=
default
.target
WantedBy
=
multi-user
.target
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment