File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -6,27 +6,27 @@ CapabilityBoundingSet=CAP_CHOWN CAP_DAC_OVERRIDE CAP_FOWNER
66CPUSchedulingPolicy =batch
77ExecStart =/usr/local/bin/remote-backup
88IOSchedulingPriority =7
9- LockPersonality =true
10- MemoryDenyWriteExecute =true
9+ LockPersonality =yes
10+ MemoryDenyWriteExecute =yes
1111Nice =19
12- NoNewPrivileges =true
13- PrivateDevices =true
14- PrivateIPC =true
15- PrivateTmp =true
12+ NoNewPrivileges =yes
13+ PrivateDevices =yes
14+ PrivateIPC =yes
15+ PrivateTmp =yes
1616ProcSubset =pid
17- ProtectClock =true
18- ProtectControlGroups =true
19- ProtectHostname =true
20- ProtectKernelLogs =true
21- ProtectKernelModules =true
22- ProtectKernelTunables =true
17+ ProtectClock =yes
18+ ProtectControlGroups =yes
19+ ProtectHostname =yes
20+ ProtectKernelLogs =yes
21+ ProtectKernelModules =yes
22+ ProtectKernelTunables =yes
2323ProtectProc =invisible
2424ProtectSystem =strict
25- RemoveIPC =true
25+ RemoveIPC =yes
2626RestrictAddressFamilies =AF_INET AF_INET6 AF_UNIX
27- RestrictNamespaces =true
28- RestrictRealtime =true
29- RestrictSUIDSGID =true
27+ RestrictNamespaces =yes
28+ RestrictRealtime =yes
29+ RestrictSUIDSGID =yes
3030SystemCallArchitectures =native
3131SystemCallFilter =@system-service
3232SystemCallFilter =~@obsolete
You can’t perform that action at this time.
0 commit comments