Skip to content

Instantly share code, notes, and snippets.

@pmauduit
Created September 26, 2021 10:36
Show Gist options
  • Save pmauduit/02a605cc680c068d4f8ad62695d8f6c0 to your computer and use it in GitHub Desktop.
Save pmauduit/02a605cc680c068d4f8ad62695d8f6c0 to your computer and use it in GitHub Desktop.
systemd-logind - not failing systemd configuration under LXC
[Service]
PrivateTmp=no
RestrictNamespaces=no
ReadWritePaths=/etc /run /var/run
CapabilityBoundingSet=CAP_SYS_ADMIN CAP_MAC_ADMIN CAP_AUDIT_CONTROL CAP_CHOWN CAP_KILL CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_FOWNER CAP_SYS_TTY_CONFIG
ProtectProc=default
ProtectClock=yes
ProtectControlGroups=no
ProtectHome=no
ProtectHostname=yes
ProtectKernelLogs=yes
ProtectKernelModules=yes
ProtectSystem=strict
ReadWritePaths=/etc /run /var/run
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment