diff options
Diffstat (limited to 'data')
| -rw-r--r-- | data/geoclue.service.in | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/data/geoclue.service.in b/data/geoclue.service.in index dc77b48..6449d30 100644 --- a/data/geoclue.service.in +++ b/data/geoclue.service.in @@ -6,3 +6,25 @@ Type=dbus BusName=org.freedesktop.GeoClue2 User=@dbus_srv_user@ ExecStart=@libexecdir@/geoclue + +# Filesystem lockdown +ProtectSystem=strict +ProtectKernelTunables=true +ProtectControlGroups=true +ProtectHome=true +PrivateTmp=true + +# Network +PrivateNetwork=false + +# Execute Mappings +MemoryDenyWriteExecute=true + +# Modules +ProtectKernelModules=true + +# Real-time +RestrictRealtime=true + +# Privilege escalation +NoNewPrivileges=true |