summarylogtreecommitdiffstats
path: root/bs.service
diff options
context:
space:
mode:
Diffstat (limited to 'bs.service')
-rw-r--r--bs.service6
1 files changed, 6 insertions, 0 deletions
diff --git a/bs.service b/bs.service
index 751baa081580..53c4ea27fd5c 100644
--- a/bs.service
+++ b/bs.service
@@ -9,6 +9,12 @@ Group=obelisk
ExecStart=/usr/bin/bs /etc/obelisk/bs/bs.cfg
ExecReload=/usr/bin/kill -s SIGHUP $MAINPID
ExecStop=/usr/bin/kill -s SIGINT $MAINPID
+MemoryDenyWriteExecute=true
+NoNewPrivileges=true
+PrivateDevices=true
+PrivateTmp=true
+ProtectSystem=full
+SystemCallArchitectures=native
[Install]
WantedBy=multi-user.target