File tree Expand file tree Collapse file tree 1 file changed +0
-20
lines changed Expand file tree Collapse file tree 1 file changed +0
-20
lines changed Original file line number Diff line number Diff line change @@ -12,25 +12,5 @@ ExecReload=/usr/bin/monit reload
12
12
Restart =on-abnormal
13
13
StandardOutput =null
14
14
15
- # hardening options
16
- # details: https://www.freedesktop.org/software/systemd/man/systemd.exec.html
17
- CapabilityBoundingSet =~CAP_SYS_ADMIN
18
- LockPersonality =true
19
- MemoryDenyWriteExecute =true
20
- NoNewPrivileges =true
21
- PrivateTmp =true
22
- ProtectClock =true
23
- ProtectControlGroups =true
24
- ProtectHome =yes
25
- ProtectHostname =true
26
- ProtectKernelLogs =true
27
- ProtectKernelModules =true
28
- ProtectKernelTunables =true
29
- ProtectSystem =strict
30
- ReadWritePaths =/run/ /var/lib/monit/ /var/log/ /etc/tedge/ /opt/tedge-monit/
31
- RestrictRealtime =true
32
- RestrictSUIDSGID =true
33
- SystemCallArchitectures =native
34
-
35
15
[Install]
36
16
WantedBy =multi-user.target
You can’t perform that action at this time.
0 commit comments