mirror of
https://github.com/GrapheneOS/matrix.grapheneos.org.git
synced 2024-12-24 15:09:29 -05:00
add RemoveIPC=true since systemd lints for it
This isn't useful due to PrivateIPC=true but there's no harm in including it to satisfy the security linter.
This commit is contained in:
parent
84cfdcfe4d
commit
28c063bdc2
@ -25,6 +25,7 @@ ProtectKernelTunables=true
|
|||||||
ProtectProc=invisible
|
ProtectProc=invisible
|
||||||
ProtectSystem=strict
|
ProtectSystem=strict
|
||||||
ReadWritePaths=/var/lib/mjolnir
|
ReadWritePaths=/var/lib/mjolnir
|
||||||
|
RemoveIPC=true
|
||||||
Restart=on-failure
|
Restart=on-failure
|
||||||
RestartSec=5s
|
RestartSec=5s
|
||||||
RestrictAddressFamilies=AF_INET6
|
RestrictAddressFamilies=AF_INET6
|
||||||
|
Loading…
Reference in New Issue
Block a user