mirror of
https://github.com/GrapheneOS/matrix.grapheneos.org.git
synced 2025-12-16 00:13:55 -05:00
add RemoveIPC=true since systemd lints for it
This isn't useful due to PrivateIPC=true but there's no harm in including it to satisfy the security linter.
This commit is contained in:
parent
84cfdcfe4d
commit
28c063bdc2
1 changed files with 1 additions and 0 deletions
|
|
@ -25,6 +25,7 @@ ProtectKernelTunables=true
|
||||||
ProtectProc=invisible
|
ProtectProc=invisible
|
||||||
ProtectSystem=strict
|
ProtectSystem=strict
|
||||||
ReadWritePaths=/var/lib/mjolnir
|
ReadWritePaths=/var/lib/mjolnir
|
||||||
|
RemoveIPC=true
|
||||||
Restart=on-failure
|
Restart=on-failure
|
||||||
RestartSec=5s
|
RestartSec=5s
|
||||||
RestrictAddressFamilies=AF_INET6
|
RestrictAddressFamilies=AF_INET6
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue