mirror of
https://github.com/Mikaela/Limnoria-doc.git
synced 2025-10-16 02:17:22 +02:00
systemd sandboxing
This commit is contained in:
parent
b9e29a8eec
commit
f7593a1751
@ -101,6 +101,11 @@ following content replacing things were suitable::
|
|||||||
Restart=always
|
Restart=always
|
||||||
User=BOTUSERNAME
|
User=BOTUSERNAME
|
||||||
SyslogIdentifier=Supybot
|
SyslogIdentifier=Supybot
|
||||||
|
# Uncomment these lines for extra security at the cost of breaking some third-party plugins:
|
||||||
|
# SystemCallFilter=~@raw-io @clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io
|
||||||
|
# ProtectSystem=strict
|
||||||
|
# ProtectHome=read-only
|
||||||
|
# ReadWritePaths=/home/bot/botname
|
||||||
|
|
||||||
[Install]
|
[Install]
|
||||||
WantedBy=multi-user.target
|
WantedBy=multi-user.target
|
||||||
|
Loading…
x
Reference in New Issue
Block a user