From c449994e2272b156b3163df44a5c43abc1145498 Mon Sep 17 00:00:00 2001
From: TubbyCat <tubbycat.dev.pub@protonmail.com>
Date: Thu, 25 Aug 2022 18:31:43 -0400
Subject: [PATCH] Update log2ram.service

---
 log2ram.service | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/log2ram.service b/log2ram.service
index 1d6ba23..130efb1 100644
--- a/log2ram.service
+++ b/log2ram.service
@@ -15,13 +15,13 @@ ExecReload= /usr/local/bin/log2ram write
 TimeoutStartSec=120
 RemainAfterExit=yes
 
-# SANDBOXING
+# Sandboxing
 LockPersonality=true
 MemoryDenyWriteExecute=true
 NoNewPriviliges=true
 PrivateDevices=true
 PrivateNetwork=true 
-  #Will likely break "MAIL" in log2ram.config if does not point to localhost or is unused. 
+  #May break "MAIL" in log2ram.conf if it points to non-local web address. 
 ProtectClock=true
 ProtectControlGroups=true
 ProtectHostname=true
@@ -32,8 +32,8 @@ RestrictSUIDSGID=true
 ProtectSystem=true
   # ALT: ProtectSystem=full # needs rw whitelisting for /var/hdd.log/ 
 ProtectHome=true 
-  #will likely break situations wherein configured to also copy logs from $HOME. 
-  #can probably fix with systemctl edit to whitelist relevant dirs 
+  #may cause breakage in situations wherein user has configured log2ram to also copy logs from $HOME. 
+  #can probably fix with systemctl edit to whitelist relevant dirs. See: ReadWritePaths=
 
 [Install]
 WantedBy=sysinit.target