Thread (3 messages) 3 messages, 2 authors, 2016-06-30

systemd service hardening

flat view

From: Craig Andrews <hidden>
Date: 2016-06-29 21:07:53

I've been on a bit of a mission lately to improve the hardening of systemd services wherever I can find them. Today, I ran across this one.

I believe the hardening of the bluetooth.service ( https://git.kernel.org/cgit/bluetooth/bluez.git/tree/src/bluetooth.service.in ) can be easily improved by adding these 2 lines:
PrivateTmp=true
NoNewPrivileges=true

If there is agreement, can a committer please make this change?

Thanks,
~Craig
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help