Update Systemd security settings

cronie-crond / cronie

Cronie cron daemon project

Other

453 stars 77 forks source link

Update Systemd security settings #179

Closed rahulsundaram closed 3 months ago

rahulsundaram commented 4 months ago

As part of https://fedoraproject.org/wiki/Changes/SystemdSecurityHardening which has been approved for Fedora 40, I am working on updating Systemd services to add additional hardening settings, please review this PR and let me know if you have any feedback.

https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html has detailed information on each of these settings including the version of Systemd where they were introduced.

t8m commented 4 months ago

Hmm, do all these settings affect child processes of crond? Namely the executed cron jobs? In many cases these have high potential of breaking existing users cron jobs and are not really a good idea.

t8m commented 3 months ago

Merged after the 1.7.2 release.