mirror of
https://github.com/Mikaela/Limnoria-doc.git
synced 2025-02-16 21:40:45 +01:00
systemd sandboxing
This commit is contained in:
parent
b9e29a8eec
commit
f7593a1751
@ -101,6 +101,11 @@ following content replacing things were suitable::
|
||||
Restart=always
|
||||
User=BOTUSERNAME
|
||||
SyslogIdentifier=Supybot
|
||||
# Uncomment these lines for extra security at the cost of breaking some third-party plugins:
|
||||
# SystemCallFilter=~@raw-io @clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io
|
||||
# ProtectSystem=strict
|
||||
# ProtectHome=read-only
|
||||
# ReadWritePaths=/home/bot/botname
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
|
Loading…
x
Reference in New Issue
Block a user