Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2024-12-22 13:45:02 -05:00
Code Issues Packages Projects Releases Wiki Activity

Sort NGINX override alphabetically

Browse Source 
Everything is already sorted alphabetically, but for some reason NoNewPrivileges is above MemoryDenyWriteExecute
This commit is contained in:
Tommy 2024-06-24 08:34:48 -07:00 committed by Daniel Micay
parent 0e4d94e550
commit 55221c8e44
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
systemd/system/nginx.service.d/local.conf
View File

@ -1,8 +1,8 @@
[Service]
CapabilityBoundingSet=CAP_CHOWN CAP_DAC_OVERRIDE CAP_NET_BIND_SERVICE CAP_SETUID CAP_SETGID
LockPersonality=true
NoNewPrivileges=true
MemoryDenyWriteExecute=true
NoNewPrivileges=true
PrivateIPC=true
ProcSubset=pid
ProtectClock=true