systemd updates

This commit is contained in:
Archi
2021-09-27 11:05:39 +02:00
parent 13996748e5
commit 79fb4da9a6
3 changed files with 87 additions and 3 deletions

View File

@@ -9,7 +9,7 @@ RestartSec=5s
SyslogIdentifier=asf-%i
User=%i
# ASF hardening
# ASF security hardening
LockPersonality=yes
PrivateDevices=yes
PrivateMounts=yes
@@ -22,7 +22,7 @@ ProtectKernelLogs=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
ProtectSystem=full
ReadWritePaths=/home/%i/ArchiSteamFarm
ReadWritePaths=/home/%i/ArchiSteamFarm /tmp/ASF
RemoveIPC=yes
RestrictAddressFamilies=AF_INET AF_INET6
RestrictNamespaces=yes
@@ -39,4 +39,4 @@ RestrictSUIDSGID=yes
After=network.target network-online.target
Description=ArchiSteamFarm Service (on %I)
Documentation=https://github.com/JustArchiNET/ArchiSteamFarm/wiki
Wants=network-online.target
Wants=network.target network-online.target