mirror of
https://github.com/fort-nix/nix-bitcoin.git
synced 2024-09-11 15:05:40 +03:00
Restrict namespaces for systemd services by default
This commit is contained in:
parent
eaaf8e9aab
commit
6f8dac6e07
@ -14,6 +14,7 @@ let
|
||||
ProtectKernelModules = "true";
|
||||
ProtectControlGroups = "true";
|
||||
RestrictAddressFamilies = "AF_UNIX AF_INET AF_INET6";
|
||||
RestrictNamespaces = "true";
|
||||
LockPersonality = "true";
|
||||
IPAddressDeny = "any";
|
||||
};
|
||||
|
Loading…
Reference in New Issue
Block a user