Merge pull request #76537 from Izorkin/unit

unit: 1.13.0 -> 1.14.0
This commit is contained in:
Jörg Thalheim
2020-01-21 11:39:41 +00:00
committed by GitHub
3 changed files with 87 additions and 3 deletions

View File

@@ -111,7 +111,7 @@ in {
AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" "CAP_SETGID" "CAP_SETUID" ];
# Security
NoNewPrivileges = true;
# Sanboxing
# Sandboxing
ProtectSystem = "full";
ProtectHome = true;
RuntimeDirectory = "unit";