burble.dn42/lgregmapper
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Harden systemd unit file

Browse Source
This commit is contained in:
Simon Marsh 2019-03-06 19:22:10 +00:00
parent f945ec7913
commit 46e83bcb68
Signed by: burble
GPG Key ID: 7B9FE8780CFB6593
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
contrib/lgregmapper.service
View File

@ -14,6 +14,16 @@ User=lglass
Group=lglass Group=lglass
Type=simple Type=simple
Restart=on-failure Restart=on-failure
# service hardening
ProtectSystem=strict
NoNewPrivileges=yes
ProtectControlGroups=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
MemoryDenyWriteExecute=yes
ProtectHome=true
#
ExecStart=/opt/lgregmapper/lgregmapper -b ":11211" ExecStart=/opt/lgregmapper/lgregmapper -b ":11211"
######################################################################### #########################################################################