Skip to content
GitLab
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Menu
Open sidebar
Arch Linux
infrastructure
Commits
9ffdb683
Commit
9ffdb683
authored
Nov 15, 2019
by
Jelle van der Waa
🚧
Browse files
archweb: harden mirror related further
Add some new systemd hardening features to network related services.
parent
86cd446a
Changes
2
Hide whitespace changes
Inline
Side-by-side
roles/archweb/templates/archweb-mirrorcheck.service.j2
View file @
9ffdb683
...
...
@@ -20,6 +20,10 @@ PrivateDevices=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
ProtectHostname=true
RestrictRealtime=true
CapabilityBoundingSet=
MemoryDenyWriteExecute=true
[Install]
WantedBy=multi-user.target
roles/archweb/templates/archweb-mirrorresolv.service.j2
View file @
9ffdb683
...
...
@@ -17,6 +17,10 @@ PrivateDevices=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
ProtectHostname=true
RestrictRealtime=true
CapabilityBoundingSet=
MemoryDenyWriteExecute=true
[Install]
WantedBy=multi-user.target
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment