Matrix-Mirrors/matrix.grapheneos.org
1
0
Fork 0
mirror of https://github.com/GrapheneOS/matrix.grapheneos.org.git synced 2024-12-18 12:24:37 -05:00
Code Issues Packages Projects Releases Wiki Activity

extend matterbridge service hardening

Browse Source
This commit is contained in:
Daniel Micay 2022-08-09 06:18:21 -04:00
parent 28c063bdc2
commit 5a4b71ed29
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
systemd/system/matterbridge.service.d/hardening.conf Normal file
View File

@ -0,0 +1,8 @@
[Service]
# use a persistent user so that nftables can use it for skuid rules
DynamicUser=false
MemoryDenyWriteExecute=true
RemoveIPC=true
ProcSubset=pid
ProtectProc=invisible