Pārlūkot izejas kodu

scripts: apply hardening for systemd service (#5332)

Bogdan Khomutsky 6 gadi atpakaļ
vecāks
revīzija
66016b8499
1 mainītis faili ar 4 papildinājumiem un 0 dzēšanām
  1. 4 0
      scripts/systemd/gogs.service

+ 4 - 0
scripts/systemd/gogs.service

@@ -18,6 +18,10 @@ WorkingDirectory=/home/git/gogs
 ExecStart=/home/git/gogs/gogs web
 Restart=always
 Environment=USER=git HOME=/home/git
+# Hardening
+ProtectSystem=full
+PrivateDevices=yes
+PrivateTmp=yes
 
 [Install]
 WantedBy=multi-user.target