Merge pull request #275024 from jerith666/lorri-less-protected
This commit is contained in:
commit
7fab1e2013
1 changed files with 1 additions and 2 deletions
|
@ -44,8 +44,7 @@ in {
|
||||||
serviceConfig = {
|
serviceConfig = {
|
||||||
ExecStart = "${cfg.package}/bin/lorri daemon";
|
ExecStart = "${cfg.package}/bin/lorri daemon";
|
||||||
PrivateTmp = true;
|
PrivateTmp = true;
|
||||||
ProtectSystem = "strict";
|
ProtectSystem = "full";
|
||||||
ProtectHome = "read-only";
|
|
||||||
Restart = "on-failure";
|
Restart = "on-failure";
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
Loading…
Reference in a new issue