proc-hidepid.service add gid=proc

This allows users that are a member of the `proc` group to be excluded from `hidepid` protections.

https://github.com/Kicksecure/security-misc/issues/208
This commit is contained in:
Patrick Schleizer 2024-03-10 08:44:53 -04:00
parent 0f0d9ca2a4
commit a5206bde33
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48

View File

@ -12,7 +12,7 @@ After=local-fs.target
[Service]
Type=oneshot
ExecStart=/bin/mount -o remount,nosuid,nodev,noexec,hidepid=2 /proc
ExecStart=/bin/mount -o remount,nosuid,nodev,noexec,hidepid=2,gid=proc /proc
RemainAfterExit=yes
[Install]