From a7b02e0b4ef548545cd28db3e51c5a500e253a62 Mon Sep 17 00:00:00 2001 From: Alexander Miroshnichenko Date: Thu, 23 Jan 2025 08:30:39 +0300 Subject: [PATCH] net-proxy/youtubeUnblock: hardening service --- net-proxy/youtubeUnblock/youtubeUnblock-1.0.0_rc5.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/net-proxy/youtubeUnblock/youtubeUnblock-1.0.0_rc5.ebuild b/net-proxy/youtubeUnblock/youtubeUnblock-1.0.0_rc5.ebuild index ab09426..b108282 100644 --- a/net-proxy/youtubeUnblock/youtubeUnblock-1.0.0_rc5.ebuild +++ b/net-proxy/youtubeUnblock/youtubeUnblock-1.0.0_rc5.ebuild @@ -34,7 +34,7 @@ src_prepare() { -e "/\[Service\]/a AmbientCapabilities=CAP_NET_RAW CAP_NET_ADMIN" \ -e "/\[Service\]/a CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW" \ -e "/\[Service\]/a RestrictNamespaces=yes" \ - -e "/\[Service\]/a ProtectSystem=full" \ + -e "/\[Service\]/a ProtectSystem=strict" \ -e "/\[Service\]/a ProtectHome=true" \ -e "/\[Service\]/a PrivateTmp=true" \ youtubeUnblock.service