From ca0b8afa62b7d7196c38fdbcecec14f82d7eada7 Mon Sep 17 00:00:00 2001 From: ericgaspar Date: Thu, 24 Mar 2022 17:25:44 +0100 Subject: [PATCH] Update systemd.service --- conf/systemd.service | 22 ---------------------- 1 file changed, 22 deletions(-) diff --git a/conf/systemd.service b/conf/systemd.service index 65e0480..de90501 100644 --- a/conf/systemd.service +++ b/conf/systemd.service @@ -14,27 +14,5 @@ Environment=PORT=__PORT__ EnvironmentFile=-__FINALPATH__/libreddit.conf ExecStart=__FINALPATH__/libreddit -a ${ADDRESS} -p ${PORT} -# Hardening -DeviceAllow= -LockPersonality=yes -MemoryDenyWriteExecute=yes -PrivateDevices=yes -ProcSubset=pid -ProtectClock=yes -ProtectControlGroups=yes -ProtectHome=yes -ProtectHostname=yes -ProtectKernelLogs=yes -ProtectKernelModules=yes -ProtectKernelTunables=yes -ProtectProc=invisible -RestrictAddressFamilies=AF_INET AF_INET6 -RestrictNamespaces=yes -RestrictRealtime=yes -RestrictSUIDSGID=yes -SystemCallArchitectures=native -SystemCallFilter=@system-service ~@privileged ~@resources -UMask=0077 - [Install] WantedBy=multi-user.target