From f4cd8e803b4aea4e7c598366bd58605a9f0585a5 Mon Sep 17 00:00:00 2001 From: Bastien Nocera Date: Fri, 4 May 2018 16:09:10 +0200 Subject: [PATCH] data: Make filesystem access strict We don't need write access to /etc, so block it. --- data/iio-sensor-proxy.service.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/data/iio-sensor-proxy.service.in b/data/iio-sensor-proxy.service.in index 01e1e79..3704d68 100644 --- a/data/iio-sensor-proxy.service.in +++ b/data/iio-sensor-proxy.service.in @@ -9,7 +9,7 @@ ExecStart=@sbindir@/iio-sensor-proxy #Environment="G_MESSAGES_DEBUG=all" # Lockdown -ProtectSystem=true +ProtectSystem=strict ProtectControlGroups=true ProtectHome=true ProtectKernelModules=true