diff options
| author | Lennart Poettering <lennart@poettering.net> | 2019-03-20 19:52:20 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2019-04-02 16:56:48 +0200 |
| commit | 62aa29247c3d74bcec0607c347f2be23cd90675d (patch) | |
| tree | 5bbb870abd0f9911b3d7191c4227f980f0aa9fbe /units/systemd-networkd.service.in | |
| parent | man: document the new RestrictSUIDSGID= setting (diff) | |
| download | systemd-62aa29247c3d74bcec0607c347f2be23cd90675d.tar.xz systemd-62aa29247c3d74bcec0607c347f2be23cd90675d.zip | |
units: turn on RestrictSUIDSGID= in most of our long-running daemons
Diffstat (limited to 'units/systemd-networkd.service.in')
| -rw-r--r-- | units/systemd-networkd.service.in | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/units/systemd-networkd.service.in b/units/systemd-networkd.service.in index 472ef045de..2c74da6f1e 100644 --- a/units/systemd-networkd.service.in +++ b/units/systemd-networkd.service.in @@ -34,6 +34,7 @@ RestartSec=0 RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6 AF_PACKET RestrictNamespaces=yes RestrictRealtime=yes +RestrictSUIDSGID=yes RuntimeDirectory=systemd/netif RuntimeDirectoryPreserve=yes SystemCallArchitectures=native |