net-proxy/youtubeUnblock: hardening service
This commit is contained in:
parent
5e7dfe235f
commit
a7b02e0b4e
@ -34,7 +34,7 @@ src_prepare() {
|
|||||||
-e "/\[Service\]/a AmbientCapabilities=CAP_NET_RAW CAP_NET_ADMIN" \
|
-e "/\[Service\]/a AmbientCapabilities=CAP_NET_RAW CAP_NET_ADMIN" \
|
||||||
-e "/\[Service\]/a CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW" \
|
-e "/\[Service\]/a CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW" \
|
||||||
-e "/\[Service\]/a RestrictNamespaces=yes" \
|
-e "/\[Service\]/a RestrictNamespaces=yes" \
|
||||||
-e "/\[Service\]/a ProtectSystem=full" \
|
-e "/\[Service\]/a ProtectSystem=strict" \
|
||||||
-e "/\[Service\]/a ProtectHome=true" \
|
-e "/\[Service\]/a ProtectHome=true" \
|
||||||
-e "/\[Service\]/a PrivateTmp=true" \
|
-e "/\[Service\]/a PrivateTmp=true" \
|
||||||
youtubeUnblock.service
|
youtubeUnblock.service
|
||||||
|
Loading…
Reference in New Issue
Block a user