Commit ec5813f8 authored by Matti Lehtimäki's avatar Matti Lehtimäki

Merge branch 'jb44449' into 'master'

[sensorfw] Sandbox the sensorfwd service. JB#44449

See merge request !38
parents 043fb68d 2926a491
......@@ -11,6 +11,12 @@ ExecStart=/usr/sbin/sensorfwd -c=/etc/sensorfw/primaryuse.conf --systemd --log-l
ExecReload=/bin/kill -HUP $MAINPID
Restart=always
RestartSec=1
# Sandboxing
CapabilityBoundingSet=CAP_DAC_OVERRIDE CAP_FOWNER
PrivateNetwork=true
PrivateTmp=yes
ProtectHome=yes
ProtectSystem=full
[Install]
WantedBy=graphical.target
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment