summarylogtreecommitdiffstats
path: root/bs-init.service
diff options
context:
space:
mode:
authorAndy Weidenbaum2018-04-04 17:44:43 -0400
committerAndy Weidenbaum2018-04-04 17:44:43 -0400
commit09ca189130ce151ddb49b732a4d6a7edbd81f023 (patch)
tree3cba6c0eb47b06fe0255dd48d796ff81f4117e96 /bs-init.service
parente9cf6e968523e8d13efb9f04a72fc95fffe5bcdf (diff)
downloadaur-09ca189130ce151ddb49b732a4d6a7edbd81f023.tar.gz
increment pkgrel; harden *.service
credit: https://github.com/bitcoin/bitcoin/pull/12769
Diffstat (limited to 'bs-init.service')
-rw-r--r--bs-init.service6
1 files changed, 6 insertions, 0 deletions
diff --git a/bs-init.service b/bs-init.service
index 9c8aa9334b2..70a95df8da7 100644
--- a/bs-init.service
+++ b/bs-init.service
@@ -7,6 +7,12 @@ Type=oneshot
User=obelisk
Group=obelisk
ExecStart=/usr/bin/bs -i /etc/obelisk/bs/bs.cfg
+MemoryDenyWriteExecute=true
+NoNewPrivileges=true
+PrivateDevices=true
+PrivateTmp=true
+ProtectSystem=full
+SystemCallArchitectures=native
[Install]
WantedBy=multi-user.target