fdo-mirrors/fprintd
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/libfprint/fprintd.git synced 2026-05-04 21:08:03 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

data: Add additional fprintd lockdown

Browse source
This commit is contained in:
Bastien Nocera 2020-10-02 14:17:38 +02:00 • committed by Benjamin Berg
parent 6dc699ae6f
commit 2fd86624e5
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
data/fprintd.service.in
View file

@ -15,6 +15,8 @@ ProtectControlGroups=true
StateDirectory=fprint
ProtectHome=true
PrivateTmp=true
ProtectKernelLogs=yes
SystemCallFilter=@system-service
# Network
PrivateNetwork=true
@ -31,3 +33,8 @@ RestrictRealtime=true
# Privilege escalation
NoNewPrivileges=true
TasksMax=1
# Capabilities
CapabilityBoundingSet=
ProtectClock=yes