diff --git a/contrib/lgregmapper.service b/contrib/lgregmapper.service index 1cb05fd..cc9019e 100644 --- a/contrib/lgregmapper.service +++ b/contrib/lgregmapper.service @@ -14,6 +14,16 @@ User=lglass Group=lglass Type=simple Restart=on-failure +# service hardening +ProtectSystem=strict +NoNewPrivileges=yes +ProtectControlGroups=yes +PrivateTmp=yes +PrivateDevices=yes +DevicePolicy=closed +MemoryDenyWriteExecute=yes +ProtectHome=true +# ExecStart=/opt/lgregmapper/lgregmapper -b ":11211" #########################################################################