diff --git a/data/iio-sensor-proxy.service.in b/data/iio-sensor-proxy.service.in index e4b6e78..e786780 100644 --- a/data/iio-sensor-proxy.service.in +++ b/data/iio-sensor-proxy.service.in @@ -7,3 +7,13 @@ BusName=net.hadess.SensorProxy ExecStart=@sbindir@/iio-sensor-proxy #Uncomment this to enable debug #Environment="G_MESSAGES_DEBUG=all" + +# Lockdown +ProtectSystem=true +ProtectControlGroups=true +ProtectHome=true +ProtectKernelModules=true +PrivateTmp=true +PrivateNetwork=true +MemoryDenyWriteExecute=true +RestrictRealtime=true