dany/eg25-manager
1
0
Fork 0
mirror of https://gitlab.com/mobian1/eg25-manager.git synced 2025-08-29 23:32:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'debian/latest' into 'debian/latest'

Browse Source 
d/service: Use systemd to sandbox eg25-manager

See merge request mobian1/devices/eg25-manager!16
This commit is contained in:
Arnaud Ferraris
2021-07-26 23:34:32 +00:00
parent c7e8d9171c 67195a8e58
commit b62b155875
1 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
debian/eg25-manager.service vendored
View File

@@ -6,6 +6,23 @@ Before=ModemManager.service
Type=simple Type=simple
ExecStart=/usr/bin/eg25manager ExecStart=/usr/bin/eg25manager
Restart=on-failure Restart=on-failure
ProtectControlGroups=true
ProtectHome=true
ProtectKernelTunables=true
ProtectSystem=strict
RestrictSUIDSGID=true
PrivateTmp=true
ProtectedKernelModules=true
MemoryDenyWriteExecute=true
PrivateMounts=true
NoNewPrivileges=true
CapabilityBoundingSet=
ProtectProc=true
ProtectDevices=true
DeviceAllow=/dev/ttyS2
LockPersonality=true
ProtectClock=true
ProtectKernelLog=true
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target