BindPaths -> ReadWritePaths for all systemd services

This commit is contained in:
Daniel Winzen
2020-01-05 19:31:52 +01:00
parent d7c886bb54
commit 930052fe1e
3 changed files with 10 additions and 10 deletions

View File

@ -9,6 +9,6 @@ ProtectControlGroups=true
LockPersonality=true
MemoryDenyWriteExecute=true
SystemCallArchitectures=native
BindPaths=/var/spool/
BindPaths=/var/lib/
InaccessiblePaths=/var/www/
ReadWritePaths=-/var/spool/
ReadWritePaths=-/var/lib/
InaccessiblePaths=-/var/www/