mirror of
https://github.com/transmission/transmission
synced 2024-12-22 15:54:57 +00:00
daemon: deny memory wx in transmission-daemon.service (#2573)
Attempts to create memory mappings that are writable and executable at the same time, or to change existing memory mappings to become executable, or mapping shared memory segments as executable are prohibited. There's no reason transmission should be doing that. If it does, it's because of malicious code exploiting a vulnerability. See: https://www.freedesktop.org/software/systemd/man/systemd.exec.html#MemoryDenyWriteExecute=
This commit is contained in:
parent
4455673bed
commit
56dab2bd18
1 changed files with 1 additions and 0 deletions
|
@ -8,6 +8,7 @@ Type=notify
|
|||
ExecStart=/usr/bin/transmission-daemon -f --log-error
|
||||
ExecReload=/bin/kill -s HUP $MAINPID
|
||||
NoNewPrivileges=true
|
||||
MemoryDenyWriteExecute=true
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
|
|
Loading…
Reference in a new issue