data: Make filesystem access strict

We don't need write access to /etc, so block it.
2018-05-04 16:09:10 +02:00
parent e608d2c70f
commit f4cd8e803b
1 changed files with 1 additions and 1 deletions
--- a/data/iio-sensor-proxy.service.in
+++ b/data/iio-sensor-proxy.service.in
@@ -9,7 +9,7 @@ ExecStart=@sbindir@/iio-sensor-proxy
 #Environment="G_MESSAGES_DEBUG=all"

 # Lockdown
-ProtectSystem=true
+ProtectSystem=strict
 ProtectControlGroups=true
 ProtectHome=true
 ProtectKernelModules=true