summarylogtreecommitdiffstats
path: root/tmate-ssh-server.service
diff options
context:
space:
mode:
authorChristian Hesse2020-01-10 09:38:00 +0100
committerChristian Hesse2020-01-10 09:38:00 +0100
commit09a9ef029228f2bfa4172a26bc2aa814727e05b1 (patch)
treea5611fec67a6c447294e7347c418045e8edcf4b2 /tmate-ssh-server.service
parent2dc2dcb671b79defd76d301f56d1ac05d1c6cc71 (diff)
downloadaur-tmate-ssh-server-git.tar.gz
commit tmate-ssh-server-git 2.3.0.r44.ge1a5e084-2
Diffstat (limited to 'tmate-ssh-server.service')
-rw-r--r--tmate-ssh-server.service4
1 files changed, 4 insertions, 0 deletions
diff --git a/tmate-ssh-server.service b/tmate-ssh-server.service
index 86634cda4300..8c2449e8410a 100644
--- a/tmate-ssh-server.service
+++ b/tmate-ssh-server.service
@@ -7,6 +7,10 @@ After=network.target
[Service]
EnvironmentFile=/etc/tmate-ssh-server/tmate-ssh-server.conf
ExecStart=/usr/bin/tmate-ssh-server -k /etc/tmate-ssh-server/ -p ${PORT} -h ${HOSTNAME} -v
+ProtectSystem=full
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_SYS_ADMIN CAP_SYS_CHROOT
+NoNewPrivileges=true
+PrivateTmp=true
Restart=always
RestartSec=10