Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-05-18 02:00:20 -04:00
Code Issues Projects Releases Packages Wiki Activity

Remove systemd sandboxing

Browse source
This commit is contained in:
madaidan 2019-11-16 14:56:28 +00:00 • committed by GitHub
parent 477d476bb1
commit e92022a21c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

18
lib/systemd/system/proc-hidepid.service
View file

@ -13,23 +13,5 @@ After=local-fs.target
Type=oneshot Type=oneshot
ExecStart=/bin/mount -o remount,nosuid,nodev,noexec,hidepid=2 /proc ExecStart=/bin/mount -o remount,nosuid,nodev,noexec,hidepid=2 /proc
## Disabled since not working in Qubes.
#ProtectSystem=strict
#ProtectHome=true
#ProtectKernelTunables=true
#ProtectKernelModules=true
#ProtectControlGroups=true
#PrivateTmp=true
#PrivateMounts=true
#PrivateDevices=true
#MemoryDenyWriteExecute=true
#NoNewPrivileges=true
#RestrictRealtime=true
#SystemCallArchitectures=native
#RestrictNamespaces=true
#SystemCallFilter=mount munmap access read open close stat fstat lstat mmap mprotect brk rt_sigaction rt_sigprocmask execve readlink getrlimit getuid getgid geteuid getegid statfs prctl arch_prctl set_tid_address newfstatat set_robust_list openat mkdir
PrivateNetwork=true
[Install] [Install]
WantedBy=sysinit.target WantedBy=sysinit.target