Systemd ProtectProc/ProcSubset

JGoutin / ansible_home

A collection of Ansible roles for home free software self-hosting.

https://galaxy.ansible.com/jgoutin/home

GNU General Public License v3.0

31 stars 6 forks source link

Closed JGoutin closed 1 year ago

JGoutin commented 2 years ago

Add to services, the following "new" and missing hardening:

ProtectProc=invisible
ProcSubset=pid