Extend php-fpm service hardening

a43feda9 · Jelle van der Waa · b5c138ca · a43feda9
Verified Commit a43feda9 authored 4 years ago by Jelle van der Waa
--- a/roles/php-fpm/files/php-fpm@.service
+++ b/roles/php-fpm/files/php-fpm@.service
@@ -21,6 +21,8 @@ InaccessiblePaths=-/var/lib/mysql
 ProtectKernelModules=true
 ProtectKernelTunables=true
 ProtectControlGroups=true
+ProtectKernelLogs=true
+ProtectClock=true

 RestrictRealtime=true
 RestrictNamespaces=true