net-proxy/youtubeUnblock: hardening service

This commit is contained in:
Alexander Miroshnichenko 2025-01-23 08:30:39 +03:00
parent 5e7dfe235f
commit a7b02e0b4e
Signed by: alex
GPG Key ID: E93720C6C73A77F4

View File

@ -34,7 +34,7 @@ src_prepare() {
-e "/\[Service\]/a AmbientCapabilities=CAP_NET_RAW CAP_NET_ADMIN" \ -e "/\[Service\]/a AmbientCapabilities=CAP_NET_RAW CAP_NET_ADMIN" \
-e "/\[Service\]/a CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW" \ -e "/\[Service\]/a CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW" \
-e "/\[Service\]/a RestrictNamespaces=yes" \ -e "/\[Service\]/a RestrictNamespaces=yes" \
-e "/\[Service\]/a ProtectSystem=full" \ -e "/\[Service\]/a ProtectSystem=strict" \
-e "/\[Service\]/a ProtectHome=true" \ -e "/\[Service\]/a ProtectHome=true" \
-e "/\[Service\]/a PrivateTmp=true" \ -e "/\[Service\]/a PrivateTmp=true" \
youtubeUnblock.service youtubeUnblock.service