Guillaume Charbonnier charbonnierg

## systemd_service_hardening.md

      
        
          
            
              
              1 file
            
          
          
            
              
              0 forks
            
          
          
            
              
              0 comments
            
          
          
            
              
              0 stars
            
          
        
        
          
              
          
          
            
                charbonnierg
                / systemd_service_hardening.md
            
            
              Created
              November 25, 2021 21:25
                — forked from ageis/systemd_service_hardening.md
            
              
                Options for hardening systemd service units
              
          
        
      
        
  
      
    security and hardening options for systemd service units

A common and reliable pattern in service unit files is thus:
NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict