alexvanin/certificates
1
0
Fork 0
forked from TrueCloudLab/certificates
Code Pull requests Activity

Add ProtectHome=true

Browse source
This commit is contained in:
Carl Tashian 2021-01-28 07:48:21 -08:00
parent 82f82d438c
commit 2af73881d7
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
systemd/step-ca.service
View file

@ -31,6 +31,7 @@ NoNewPrivileges=yes
; Sandboxing ; Sandboxing
ProtectSystem=full ProtectSystem=full
ProtectHome=true
RestrictNamespaces=true RestrictNamespaces=true
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
PrivateTmp=true PrivateTmp=true