diff options
Diffstat (limited to 'scripts')
| -rw-r--r-- | scripts/memcached.service | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/scripts/memcached.service b/scripts/memcached.service index 0076d84..a96445b 100644 --- a/scripts/memcached.service +++ b/scripts/memcached.service @@ -36,5 +36,9 @@ PrivateDevices=true # Required for dropping privileges and running as a different user CapabilityBoundingSet=CAP_SETGID CAP_SETUID +# Attempts to create memory mappings that are writable and executable at the same time, +# or to change existing memory mappings to become executable are prohibited. +MemoryDenyWriteExecute=true + [Install] WantedBy=multi-user.target |