Browse Source

Update log2ram.service

pull/195/head
TubbyCat 2 years ago
committed by GitHub
parent
commit
c449994e22
No known key found for this signature in database GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions
  1. +4
    -4
      log2ram.service

+ 4
- 4
log2ram.service View File

@@ -15,13 +15,13 @@ ExecReload= /usr/local/bin/log2ram write
TimeoutStartSec=120
RemainAfterExit=yes

# SANDBOXING
# Sandboxing
LockPersonality=true
MemoryDenyWriteExecute=true
NoNewPriviliges=true
PrivateDevices=true
PrivateNetwork=true
#Will likely break "MAIL" in log2ram.config if does not point to localhost or is unused.
#May break "MAIL" in log2ram.conf if it points to non-local web address.
ProtectClock=true
ProtectControlGroups=true
ProtectHostname=true
@@ -32,8 +32,8 @@ RestrictSUIDSGID=true
ProtectSystem=true
# ALT: ProtectSystem=full # needs rw whitelisting for /var/hdd.log/
ProtectHome=true
#will likely break situations wherein configured to also copy logs from $HOME.
#can probably fix with systemctl edit to whitelist relevant dirs
#may cause breakage in situations wherein user has configured log2ram to also copy logs from $HOME.
#can probably fix with systemctl edit to whitelist relevant dirs. See: ReadWritePaths=

[Install]
WantedBy=sysinit.target

Loading…
Cancel
Save