Commit 7b899baf authored by Daniel M. Capella's avatar Daniel M. Capella
Browse files

Merge branch 'pacchash.service-fix' into 'master'

fix paccache.service

Closes #2

See merge request !3
parents 871ffc94 047c87c5
......@@ -8,7 +8,6 @@ ExecStart=@bindir@/paccache -r
OOMScoreAdjust=1000
Nice=19
CPUSchedulingPolicy=idle
CPUSchedulingPriority=1
IOSchedulingClass=idle
IOSchedulingPriority=7
# Sandboxing and other hardening
......@@ -28,7 +27,7 @@ ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectKernelLogs=yes
ProtectControlGroups=yes
RestrictAddressFamilies=AF_UNIX
RestrictAddressFamilies=none
RestrictNamespaces=yes
LockPersonality=yes
MemoryDenyWriteExecute=yes
......@@ -36,5 +35,5 @@ RestrictRealtime=yes
RestrictSUIDSGID=yes
RemoveIPC=yes
PrivateMounts=yes
SystemCallFilter=@file-system
SystemCallFilter=@system-service @file-system
SystemCallArchitectures=native
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment