diff options
| author | Lennart Poettering <lennart@poettering.net> | 2019-03-20 19:52:20 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2019-04-02 16:56:48 +0200 |
| commit | 62aa29247c3d74bcec0607c347f2be23cd90675d (patch) | |
| tree | 5bbb870abd0f9911b3d7191c4227f980f0aa9fbe /units/systemd-hostnamed.service.in | |
| parent | 7445db6eb70e8d5989f481d0c5a08ace7047ae5b (diff) | |
| download | systemd-62aa29247c3d74bcec0607c347f2be23cd90675d.tar.gz | |
units: turn on RestrictSUIDSGID= in most of our long-running daemons
Diffstat (limited to 'units/systemd-hostnamed.service.in')
| -rw-r--r-- | units/systemd-hostnamed.service.in | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/units/systemd-hostnamed.service.in b/units/systemd-hostnamed.service.in index 9c925e80d9..b4f606cf78 100644 --- a/units/systemd-hostnamed.service.in +++ b/units/systemd-hostnamed.service.in @@ -32,6 +32,7 @@ ReadWritePaths=/etc RestrictAddressFamilies=AF_UNIX RestrictNamespaces=yes RestrictRealtime=yes +RestrictSUIDSGID=yes SystemCallArchitectures=native SystemCallErrorNumber=EPERM SystemCallFilter=@system-service sethostname |