From 3158a8519dbbc25e917abbd38cf95a676cfec747 Mon Sep 17 00:00:00 2001 From: Krakinou Date: Mon, 30 May 2022 23:18:09 +0200 Subject: [PATCH] remove DevicePolicy=closed --- conf/systemd.service | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/conf/systemd.service b/conf/systemd.service index 6f592d5..ad67f90 100644 --- a/conf/systemd.service +++ b/conf/systemd.service @@ -24,7 +24,8 @@ PrivateTmp=yes RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 RestrictNamespaces=yes RestrictRealtime=yes -DevicePolicy=closed +#Same : restrict access to devices +#DevicePolicy=closed ProtectSystem=full ProtectControlGroups=yes ProtectKernelModules=yes