diff --git a/conf/systemd.service b/conf/systemd.service index 310c2aa..6d7e2ba 100644 --- a/conf/systemd.service +++ b/conf/systemd.service @@ -17,11 +17,7 @@ PrivateTmp=yes RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK RestrictNamespaces=yes RestrictRealtime=yes -DevicePolicy=closed -ProtectClock=yes ProtectHostname=yes -ProtectProc=invisible -ProtectSystem=full ProtectControlGroups=yes ProtectKernelModules=yes ProtectKernelTunables=yes