mirror of
https://github.com/Limnoria/Limnoria-doc.git
synced 2025-04-08 00:09:46 +00:00
systemd sandboxing
This commit is contained in:
@ -101,6 +101,11 @@ following content replacing things were suitable::
|
|||||||
Restart=always
|
Restart=always
|
||||||
User=BOTUSERNAME
|
User=BOTUSERNAME
|
||||||
SyslogIdentifier=Supybot
|
SyslogIdentifier=Supybot
|
||||||
|
# Uncomment these lines for extra security at the cost of breaking some third-party plugins:
|
||||||
|
# SystemCallFilter=~@raw-io @clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io
|
||||||
|
# ProtectSystem=strict
|
||||||
|
# ProtectHome=read-only
|
||||||
|
# ReadWritePaths=/home/bot/botname
|
||||||
|
|
||||||
[Install]
|
[Install]
|
||||||
WantedBy=multi-user.target
|
WantedBy=multi-user.target
|
||||||
|
Reference in New Issue
Block a user