mirror of https://github.com/Jackett/Jackett
Harden a bit the systemd unit.
This commit is contained in:
parent
999e6d3d42
commit
faa57b2081
|
@ -76,6 +76,14 @@ WorkingDirectory=${JACKETT_DIR}
|
|||
ExecStart=/bin/sh "${JACKETT_DIR}/jackett_launcher.sh"
|
||||
TimeoutStopSec=30
|
||||
|
||||
ProtectHome=yes
|
||||
ProtectSystem=full
|
||||
PrivateTmp=yes
|
||||
NoNewPrivileges=yes
|
||||
ProtectDevices=yes
|
||||
ProtectKernelModules=yes
|
||||
ProtectKernelTunables=yes
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
|
||||
|
|
Loading…
Reference in New Issue