diff options
| author | Luiz Augusto von Dentz <luiz.von.dentz@intel.com> | 2022-04-19 11:18:59 -0700 |
|---|---|---|
| committer | Luiz Augusto von Dentz <luiz.von.dentz@intel.com> | 2022-04-19 11:18:59 -0700 |
| commit | 00cfb36e20e3c35db2150e7d0351ad7b8442e2d8 (patch) | |
| tree | 9d10dad78cb83659ccec06535165a8c8021935b5 /src/bluetooth.service.in | |
| parent | edc69d253445fdb5c1562713c160b4731260cc07 (diff) | |
| download | bluez-00cfb36e20e3c35db2150e7d0351ad7b8442e2d8.tar.gz | |
bluetooth.service: Set ConfigurationDirectoryMode
This sets ConfigurationDirectoryMode to 0555 to really enforce the
ConfigurationDirectory to be read-only [1].
[1] https://github.com/bluez/bluez/issues/329#issuecomment-1102459104
Diffstat (limited to 'src/bluetooth.service.in')
| -rw-r--r-- | src/bluetooth.service.in | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/bluetooth.service.in b/src/bluetooth.service.in index 4ea98b506..beb98ce0c 100644 --- a/src/bluetooth.service.in +++ b/src/bluetooth.service.in @@ -22,6 +22,7 @@ ProtectControlGroups=true StateDirectory=bluetooth StateDirectoryMode=0700 ConfigurationDirectory=bluetooth +ConfigurationDirectoryMode=0555 # Execute Mappings MemoryDenyWriteExecute=true |