diff --git a/conf/systemd.service b/conf/systemd.service index 6f592d5..ad67f90 100644 --- a/conf/systemd.service +++ b/conf/systemd.service @@ -24,7 +24,8 @@ PrivateTmp=yes RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 RestrictNamespaces=yes RestrictRealtime=yes -DevicePolicy=closed +#Same : restrict access to devices +#DevicePolicy=closed ProtectSystem=full ProtectControlGroups=yes ProtectKernelModules=yes