ClubElecINSSET/collabore-tunnel
1
1
Fork 0
Code Issues Pull Requests Releases Activity

Update collabore-tunnel.service

Browse Source
This commit is contained in:
Gaëtan L. H.-F. 2023-05-24 14:51:37 +02:00
parent ac1b5209e8
commit 8fba5f8ecb
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
collabore-tunnel.service
View File

@ -34,6 +34,7 @@ PrivateDevices=true
ProtectControlGroups=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectKernelLogs=true
ReadWritePaths=
# network
@ -54,7 +55,7 @@ ProtectClock=true
ProtectProc=invisible
# capabilities
RestrictNamespaces=uts ipc pid cgroup
RestrictNamespaces=yes
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
AmbientCapabilities=