blob: 904123072730d652ae6cf7b3984c7f5c705fae5f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
|
5a6,8
> User=xmppwebhook
> Group=xmppwebhook
> Type=simple
7c10
< ExecStart=/usr/local/bin/xmpp-webhook
---
> ExecStart=/usr/bin/xmpp-webhook
9c12,23
< RestartSec=30
---
> RestartSec=30s
> NoNewPrivileges=true
> PrivateUsers=true
> PrivateDevices=true
> PrivateTmp=true
> ProtectHome=true
> ProtectSystem=strict
> ProtectControlGroups=yes
> ProtectKernelTunables=true
> ProtectKernelModules=yes
> LockPersonality=true
> MemoryDenyWriteExecute=true
|