Christoph Sir-Photch

## systemd_service_hardening.md

      
              1 file
            
          
              49 forks
            
          
              8 comments
            
          
              349 stars
            
          
                ageis
                / systemd_service_hardening.md
            
            
              Last active
              July 19, 2024 22:23
            
              
                Options for hardening systemd service units
              
          
    security and hardening options for systemd service units

A common and reliable pattern in service unit files is thus:
NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict


## daemon
#!/usr/bin/env bash

while :; do
	bash loop
	sleep 5
done