Merge branch 'arch-boxes-hardening' into 'master'

arch_boxes_sync: Quick service filesystem hardening See merge request archlinux/infrastructure!315

Merge branch 'arch-boxes-hardening' into 'master'
c941f46f · Sven-Hendrik Haase · 004a08db · b615d2f9 · c941f46f
Commit c941f46f authored 4 years ago by Sven-Hendrik Haase
--- a/roles/arch_boxes_sync/files/arch-boxes-sync.service
+++ b/roles/arch_boxes_sync/files/arch-boxes-sync.service
@@ -4,3 +4,6 @@ Description=Sync arch-boxes releases
 [Service]
 Type=oneshot
 ExecStart=/usr/local/bin/arch-boxes-sync
+ProtectSystem=strict
+PrivateTmp=true
+ReadWritePaths=/srv/ftp/images