mirror of
https://github.com/JustArchiNET/ArchiSteamFarm
synced 2024-11-13 00:17:21 +00:00
Closes #2719
This commit is contained in:
parent
6644ec18de
commit
96296028c1
3 changed files with 15 additions and 3 deletions
|
@ -33,12 +33,16 @@ RestrictAddressFamilies=AF_INET AF_INET6
|
|||
RestrictNamespaces=yes
|
||||
RestrictRealtime=yes
|
||||
RestrictSUIDSGID=yes
|
||||
SecureBits=noroot-locked
|
||||
SystemCallArchitectures=native
|
||||
SystemCallFilter=@system-service
|
||||
SystemCallFilter=~@privileged
|
||||
UMask=0077
|
||||
|
||||
# TODO: Requires systemd v247+ due to https://github.com/systemd/systemd/issues/16666
|
||||
# Since we don't want to enforce OS upgrade for everybody just yet, it's commented out for now
|
||||
# We'll likely enforce it when .NET switches to Debian 11+ requirement
|
||||
#SecureBits=noroot-locked
|
||||
|
||||
[Unit]
|
||||
After=network.target
|
||||
Description=ArchiSteamFarm Service (on %I)
|
||||
|
|
|
@ -33,12 +33,16 @@ RestrictAddressFamilies=AF_INET AF_INET6
|
|||
RestrictNamespaces=yes
|
||||
RestrictRealtime=yes
|
||||
RestrictSUIDSGID=yes
|
||||
SecureBits=noroot-locked
|
||||
SystemCallArchitectures=native
|
||||
SystemCallFilter=@system-service
|
||||
SystemCallFilter=~@privileged
|
||||
UMask=0077
|
||||
|
||||
# TODO: Requires systemd v247+ due to https://github.com/systemd/systemd/issues/16666
|
||||
# Since we don't want to enforce OS upgrade for everybody just yet, it's commented out for now
|
||||
# We'll likely enforce it when .NET switches to Debian 11+ requirement
|
||||
#SecureBits=noroot-locked
|
||||
|
||||
[Unit]
|
||||
After=network.target
|
||||
Description=ArchiSteamFarm Service (on %I)
|
||||
|
|
|
@ -33,12 +33,16 @@ RestrictAddressFamilies=AF_INET AF_INET6
|
|||
RestrictNamespaces=yes
|
||||
RestrictRealtime=yes
|
||||
RestrictSUIDSGID=yes
|
||||
SecureBits=noroot-locked
|
||||
SystemCallArchitectures=native
|
||||
SystemCallFilter=@system-service
|
||||
SystemCallFilter=~@privileged
|
||||
UMask=0077
|
||||
|
||||
# TODO: Requires systemd v247+ due to https://github.com/systemd/systemd/issues/16666
|
||||
# Since we don't want to enforce OS upgrade for everybody just yet, it's commented out for now
|
||||
# We'll likely enforce it when .NET switches to Debian 11+ requirement
|
||||
#SecureBits=noroot-locked
|
||||
|
||||
[Unit]
|
||||
After=network.target
|
||||
Description=ArchiSteamFarm Service (on %I)
|
||||
|
|
Loading…
Reference in a new issue