mirror of
https://github.com/JustArchiNET/ArchiSteamFarm.git
synced 2026-01-16 08:25:28 +00:00
systemd updates
This commit is contained in:
@@ -9,7 +9,7 @@ RestartSec=5s
|
||||
SyslogIdentifier=asf-%i
|
||||
User=%i
|
||||
|
||||
# ASF hardening
|
||||
# ASF security hardening
|
||||
LockPersonality=yes
|
||||
PrivateDevices=yes
|
||||
PrivateMounts=yes
|
||||
@@ -22,7 +22,7 @@ ProtectKernelLogs=yes
|
||||
ProtectKernelModules=yes
|
||||
ProtectKernelTunables=yes
|
||||
ProtectSystem=full
|
||||
ReadWritePaths=/home/%i/ArchiSteamFarm
|
||||
ReadWritePaths=/home/%i/ArchiSteamFarm /tmp/ASF
|
||||
RemoveIPC=yes
|
||||
RestrictAddressFamilies=AF_INET AF_INET6
|
||||
RestrictNamespaces=yes
|
||||
@@ -39,4 +39,4 @@ RestrictSUIDSGID=yes
|
||||
After=network.target network-online.target
|
||||
Description=ArchiSteamFarm Service (on %I)
|
||||
Documentation=https://github.com/JustArchiNET/ArchiSteamFarm/wiki
|
||||
Wants=network-online.target
|
||||
Wants=network.target network-online.target
|
||||
|
||||
Reference in New Issue
Block a user