Skip to content
This repository was archived by the owner on Jun 21, 2018. It is now read-only.

Commit 9f5538c

Browse files
KellerFuchsKellerFuchs
committed
systemd: Override security measures for some services
1 parent 39a713b commit 9f5538c

5 files changed

Lines changed: 14 additions & 0 deletions

File tree

‎systemd/system/auditd.service.d/override.conf‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
[Service]
2+
CapabilityBoundingSet=
3+
NoNewPrivileges=false

‎systemd/system/cron.service.d/override.conf‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
[Service]
2+
ProtectSystem=false

‎systemd/system/lm-sensors.service.d/override.conf‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
[Service]
2+
PrivateDevices=false

‎systemd/system/restorecond.service.d/override.conf‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
[Service]
2+
CapabilityBoundingSet=
3+
ProtectSystem=true # restorecond handles files in /etc
4+
ProtectHome=false # restorecond handles files in /root

‎systemd/system/ssh.service.d/override.conf‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
[Service]
2+
CapabilityBoundingSet=
3+
NoNewPrivileges=false

0 commit comments

Comments
 (0)