abique
commented
5 years ago Thank you. By the way if I remember well, there are a couple of syscalls that could be removed from hefur, for example hefur will never create a directory.
Closed jelly closed 5 years ago
abique
commented
5 years ago Thank you. By the way if I remember well, there are a couple of syscalls that could be removed from hefur, for example hefur will never create a directory.
Include the Arch Linux based systemd service which requires a dedicated hefur user to run the hefurd service. The service also applies some systemd hardening dissalowing the service to escalate priviliges.
Closes: #27