security and hardening options for systemd service units A common and reliable pattern in service unit files is thus: NoNewPrivileges=yes PrivateTmp=yes PrivateDevices=yes DevicePolicy=closed ProtectSystem=strict
The Best of the Best Practices (BOBP) Guide for Python A "Best of the Best Practices" (BOBP) guide to developing in Python. In General Values "Build tools for others that you want to be built for you." - Kenneth Reitz "Simplicity is alway better than functionality." - Pieter Hintjens