Skip to content

Commit a651ac8

Browse files
committed
use consistent systemd boolean style
1 parent 6a611dd commit a651ac8

1 file changed

Lines changed: 16 additions & 16 deletions

File tree

systemd/system/remote-backup.service

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -6,27 +6,27 @@ CapabilityBoundingSet=CAP_CHOWN CAP_DAC_OVERRIDE CAP_FOWNER
66
CPUSchedulingPolicy=batch
77
ExecStart=/usr/local/bin/remote-backup
88
IOSchedulingPriority=7
9-
LockPersonality=true
10-
MemoryDenyWriteExecute=true
9+
LockPersonality=yes
10+
MemoryDenyWriteExecute=yes
1111
Nice=19
12-
NoNewPrivileges=true
13-
PrivateDevices=true
14-
PrivateIPC=true
15-
PrivateTmp=true
12+
NoNewPrivileges=yes
13+
PrivateDevices=yes
14+
PrivateIPC=yes
15+
PrivateTmp=yes
1616
ProcSubset=pid
17-
ProtectClock=true
18-
ProtectControlGroups=true
19-
ProtectHostname=true
20-
ProtectKernelLogs=true
21-
ProtectKernelModules=true
22-
ProtectKernelTunables=true
17+
ProtectClock=yes
18+
ProtectControlGroups=yes
19+
ProtectHostname=yes
20+
ProtectKernelLogs=yes
21+
ProtectKernelModules=yes
22+
ProtectKernelTunables=yes
2323
ProtectProc=invisible
2424
ProtectSystem=strict
25-
RemoveIPC=true
25+
RemoveIPC=yes
2626
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
27-
RestrictNamespaces=true
28-
RestrictRealtime=true
29-
RestrictSUIDSGID=true
27+
RestrictNamespaces=yes
28+
RestrictRealtime=yes
29+
RestrictSUIDSGID=yes
3030
SystemCallArchitectures=native
3131
SystemCallFilter=@system-service
3232
SystemCallFilter=~@obsolete

0 commit comments

Comments
 (0)