Re: systemd service hardening

Hi Craig,

On Thu, Jun 30, 2016 at 12:07 AM, Craig Andrews
[off-list ref] wrote:

I've been on a bit of a mission lately to improve the hardening of systemd
services wherever I can find them. Today, I ran across this one.

I believe the hardening of the bluetooth.service (
https://git.kernel.org/cgit/bluetooth/bluez.git/tree/src/bluetooth.service.in
) can be easily improved by adding these 2 lines:
PrivateTmp=true
NoNewPrivileges=true

If there is agreement, can a committer please make this change?

I don't see any problems in doing it, how long have them been introduced?

-- 
Luiz Augusto von Dentz