From 6450a113025af87aeecdfa21e59b12485168cd3e Mon Sep 17 00:00:00 2001 From: Archi Date: Fri, 15 Oct 2021 23:36:16 +0200 Subject: [PATCH] systemd service update --- ArchiSteamFarm/overlay/generic-netf/ArchiSteamFarm@.service | 4 +--- ArchiSteamFarm/overlay/generic/ArchiSteamFarm@.service | 4 +--- ArchiSteamFarm/overlay/linux/ArchiSteamFarm@.service | 4 +--- 3 files changed, 3 insertions(+), 9 deletions(-) diff --git a/ArchiSteamFarm/overlay/generic-netf/ArchiSteamFarm@.service b/ArchiSteamFarm/overlay/generic-netf/ArchiSteamFarm@.service index 0665ce3b1..28556794e 100644 --- a/ArchiSteamFarm/overlay/generic-netf/ArchiSteamFarm@.service +++ b/ArchiSteamFarm/overlay/generic-netf/ArchiSteamFarm@.service @@ -12,6 +12,7 @@ User=%i # ASF security hardening, all of the below entries are optional, but their existence improves security of your system LockPersonality=yes PrivateDevices=yes +PrivateIPC=yes PrivateMounts=yes PrivateUsers=yes ProtectClock=yes @@ -30,9 +31,6 @@ RestrictNamespaces=yes RestrictRealtime=yes RestrictSUIDSGID=yes -# Not tested, waiting for systemd 248+ in Debian -#PrivateIPC=yes - [Unit] After=network.target network-online.target Description=ArchiSteamFarm Service (on %I) diff --git a/ArchiSteamFarm/overlay/generic/ArchiSteamFarm@.service b/ArchiSteamFarm/overlay/generic/ArchiSteamFarm@.service index 5a89899f0..54a1a87fd 100644 --- a/ArchiSteamFarm/overlay/generic/ArchiSteamFarm@.service +++ b/ArchiSteamFarm/overlay/generic/ArchiSteamFarm@.service @@ -12,6 +12,7 @@ User=%i # ASF security hardening, all of the below entries are optional, but their existence improves security of your system LockPersonality=yes PrivateDevices=yes +PrivateIPC=yes PrivateMounts=yes PrivateUsers=yes ProtectClock=yes @@ -30,9 +31,6 @@ RestrictNamespaces=yes RestrictRealtime=yes RestrictSUIDSGID=yes -# Not tested, waiting for systemd 248+ in Debian -#PrivateIPC=yes - [Unit] After=network.target network-online.target Description=ArchiSteamFarm Service (on %I) diff --git a/ArchiSteamFarm/overlay/linux/ArchiSteamFarm@.service b/ArchiSteamFarm/overlay/linux/ArchiSteamFarm@.service index be25563ec..98a2bcef1 100644 --- a/ArchiSteamFarm/overlay/linux/ArchiSteamFarm@.service +++ b/ArchiSteamFarm/overlay/linux/ArchiSteamFarm@.service @@ -12,6 +12,7 @@ User=%i # ASF security hardening, all of the below entries are optional, but their existence improves security of your system LockPersonality=yes PrivateDevices=yes +PrivateIPC=yes PrivateMounts=yes PrivateUsers=yes ProtectClock=yes @@ -30,9 +31,6 @@ RestrictNamespaces=yes RestrictRealtime=yes RestrictSUIDSGID=yes -# Not tested, waiting for systemd 248+ in Debian -#PrivateIPC=yes - [Unit] After=network.target network-online.target Description=ArchiSteamFarm Service (on %I)