diff options
| author | Andy Weidenbaum | 2018-04-04 17:44:43 -0400 |
|---|---|---|
| committer | Andy Weidenbaum | 2018-04-04 17:44:43 -0400 |
| commit | 09ca189130ce151ddb49b732a4d6a7edbd81f023 (patch) | |
| tree | 3cba6c0eb47b06fe0255dd48d796ff81f4117e96 /bs-init.service | |
| parent | e9cf6e968523e8d13efb9f04a72fc95fffe5bcdf (diff) | |
| download | aur-09ca189130ce151ddb49b732a4d6a7edbd81f023.tar.gz | |
increment pkgrel; harden *.service
credit: https://github.com/bitcoin/bitcoin/pull/12769
Diffstat (limited to 'bs-init.service')
| -rw-r--r-- | bs-init.service | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/bs-init.service b/bs-init.service index 9c8aa9334b24..70a95df8da70 100644 --- a/bs-init.service +++ b/bs-init.service @@ -7,6 +7,12 @@ Type=oneshot User=obelisk Group=obelisk ExecStart=/usr/bin/bs -i /etc/obelisk/bs/bs.cfg +MemoryDenyWriteExecute=true +NoNewPrivileges=true +PrivateDevices=true +PrivateTmp=true +ProtectSystem=full +SystemCallArchitectures=native [Install] WantedBy=multi-user.target |