Commit 2926a491 authored by Matti Lehtimäki's avatar Matti Lehtimäki

[sensorfw] Sandbox the sensorfwd service. JB#37897 JB#44449

parent 043fb68d
......@@ -11,6 +11,12 @@ ExecStart=/usr/sbin/sensorfwd -c=/etc/sensorfw/primaryuse.conf --systemd --log-l
ExecReload=/bin/kill -HUP $MAINPID
Restart=always
RestartSec=1
# Sandboxing
CapabilityBoundingSet=CAP_DAC_OVERRIDE CAP_FOWNER
PrivateNetwork=true
PrivateTmp=yes
ProtectHome=yes
ProtectSystem=full
[Install]
WantedBy=graphical.target
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment