mirror of
https://github.com/GrapheneOS/matrix.grapheneos.org.git
synced 2024-12-30 01:46:14 -05:00
9 lines
177 B
Plaintext
9 lines
177 B
Plaintext
|
[Service]
|
||
|
# use a persistent user so that nftables can use it for skuid rules
|
||
|
DynamicUser=false
|
||
|
|
||
|
MemoryDenyWriteExecute=true
|
||
|
RemoveIPC=true
|
||
|
ProcSubset=pid
|
||
|
ProtectProc=invisible
|